fuzzdb/attack/string-expansion/shell-expansion.txt
Adam Muntner ecb0850538 Strings which can be accidentally expanded into different strings if evaluated in the wrong context
e.g. used as a printf format string or via Perl or shell eval. Might expose sensitive data from the program doing the interpolation, or might just represent the wrong string.

from minimaxir/big-list-of-naughty-strings
2017-01-16 12:55:38 -05:00

6 lines
35 B
Text

$HOME
$ENV{'HOME'}
%d
%s
{0}
%*.*s