DEF",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"
test",
"`\"'>
",
"`\"'>
",
"`\"'>
",
"`\"'>
",
"`\"'>
",
"`\"'>
",
"`\"'>
",
"`\"'>
",
"`\"'>
",
"`\"'>
",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"\"`'>",
"
![]()
",
"
![]()
",
"
![]()
",
"
![]()
",
"
",
"",
"",
"",
"",
"",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![]()
",
"![](x\\x09onerror=\"javascript:alert(1)\")
",
"![](x\\x10onerror=\"javascript:alert(1)\")
",
"![](x\\x11onerror=\"javascript:alert(1)\")
",
"![](x\\x12onerror=\"javascript:alert(1)\")
",
"![](x\\x13onerror=\"javascript:alert(1)\")
",
"",
"
",
"",
"",
"",
"",
"",
"XXX",
"![](\"x`)
javascript:alert(1)\"` `>",
"![]()
",
"",
"<a href=http://foo.bar/#x=`y></a><img alt=\"`><img src=x:x onerror=javascript:alert(1)></a>\">",
"<!--[if]><script>javascript:alert(1)</script -->",
"<!--[if<img src=x onerror=javascript:alert(1)//]> -->",
"<script src=\"/\\%(jscript)s\"></script>",
"<script src=\"\\\\%(jscript)s\"></script>",
"<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">",
"<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>",
"<IMG SRC=# onmouseover=\"alert('xxs')\">",
"<IMG SRC= onmouseover=\"alert('xxs')\">",
"<IMG onmouseover=\"alert('xxs')\">",
"<IMG SRC=javascript:alert('XSS')>",
"<IMG SRC=javascript:alert('XSS')>",
"<IMG SRC=javascript:alert('XSS')>",
"<IMG SRC=\"jav ascript:alert('XSS');\">",
"<IMG SRC=\"jav ascript:alert('XSS');\">",
"<IMG SRC=\"jav
ascript:alert('XSS');\">",
"<IMG SRC=\"jav
ascript:alert('XSS');\">",
"perl -e 'print \"<IMG SRC=java\\0script:alert(\\\"XSS\\\")>\";' > out",
"<IMG SRC=\" javascript:alert('XSS');\">",
"<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
"<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=alert(\"XSS\")>",
"<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
"<<SCRIPT>alert(\"XSS\");//<</SCRIPT>",
"<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >",
"<SCRIPT SRC=//ha.ckers.org/.j>",
"<IMG SRC=\"javascript:alert('XSS')\"",
"<iframe src=http://ha.ckers.org/scriptlet.html <",
"\\\";alert('XSS');//",
"<u oncopy=alert()> Copy me</u>",
"<i onwheel=alert(1)> Scroll over me </i>",
"<plaintext>",
"http://a/%%30%30",
"</textarea><script>alert(123)</script>",
"1;DROP TABLE users",
"1'; DROP TABLE users-- 1",
"' OR 1=1 -- 1",
"' OR '1'='1",
"'; EXEC sp_MSForEachTable 'DROP TABLE ?'; --",
" ",
"%",
"_",
"-",
"--",
"--version",
"--help",
"$USER",
"/dev/null; touch /tmp/blns.fail ; echo",
"`touch /tmp/blns.fail`",
"$(touch /tmp/blns.fail)",
"@{[system \"touch /tmp/blns.fail\"]}",
"eval(\"puts 'hello world'\")",
"System(\"ls -al /\")",
"`ls -al /`",
"Kernel.exec(\"ls -al /\")",
"Kernel.exit(1)",
"%x('ls -al /')",
"<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM \"file:///etc/passwd\" >]><foo>&xxe;</foo>",
"$HOME",
"$ENV{'HOME'}",
"%d",
"%s%s%s%s%s",
"{0}",
"%*.*s",
"%@",
"%n",
"File:///",
"../../../../../../../../../../../etc/passwd%00",
"../../../../../../../../../../../etc/hosts",
"() { 0; }; touch /tmp/blns.shellshock1.fail;",
"() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }",
"<<< %s(un='%s') = %u",
"+++ATH0",
"CON",
"PRN",
"AUX",
"CLOCK$",
"NUL",
"A:",
"ZZ:",
"COM1",
"LPT1",
"LPT2",
"LPT3",
"COM2",
"COM3",
"COM4",
"DCC SEND STARTKEYLOGGER 0 0 0",
"Scunthorpe General Hospital",
"Penistone Community Church",
"Lightwater Country Park",
"Jimmy Clitheroe",
"Horniman Museum",
"shitake mushrooms",
"RomansInSussex.co.uk",
"http://www.cum.qc.ca/",
"Craig Cockburn, Software Specialist",
"Linda Callahan",
"Dr. Herman I. Libshitz",
"magna cum laude",
"Super Bowl XXX",
"medieval erection of parapets",
"evaluate",
"mocha",
"expression",
"Arsenal canal",
"classic",
"Tyson Gay",
"Dick Van Dyke",
"basement",
"If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.",
"Roses are \u001b[0;31mred\u001b[0m, violets are \u001b[0;34mblue. Hope you enjoy terminal hue",
"But now...\u001b[20Cfor my greatest trick...\u001b[8m",
"The quic\b\b\b\b\b\bk brown fo\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007x... [Beeeep]",
"Powerﾄﾏﾄﾏﾵﾑﾨﾏﾄﾏﾄﾵﾑﾨﾏﾱﾱﾋ ￠ﾥﾣ ￠ﾥﾣh ￠ﾥﾣ ￠ﾥﾣ￥ﾆﾗ",
"ﾟﾏﾳ0ﾟﾌﾈﾸﾏ",
"￠ﾰﾜ￠ﾱﾍ￠ﾰﾞ￢ﾀﾌ￠ﾰﾾ",
"ￚﾯￚﾆﾾￚﾘ",
"{% print 'x' * 64 * 1024**3 %}",
"{{ \"\".__class__.__mro__[2].__subclasses__()[40](\"/etc/passwd\").read() }}"
]