/Commodity-Injection-Signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Primary LanguageHTML

#XSS.Cx Public Repo

Commodity Injection Signatures

Scraped from the Internet since 2015 and is not a ripoff of https://portswigger.net/research/one-xss-cheatsheet-to-rule-them-all which you should be using anyway.

Suggested Use:

-Include with Burp Intruder or Custom Scripts
-Manual Injection Testing with Well-Known Signatures
-Automated Fuzzing with a Wide-Range with Malicious Inputs

Send Pull Requests if you have unique inputs that should be included for distribution.

This Repo is frequently cloned and included into upstream distrbutions based on recent traffic in January 2021.

if anyone would like to see other changes, please open an Issue.

This Repo will soon get new fresh data from iPhone and Android Fuzzing using Corellium.