News for hackers. Stuff that matters.

A comment on Show HN: Big List of Naughty Strings for testing user-input data.

Re:Show HN: Big List of Naughty Strings for testing user-inp... by tptacek on Monday August 10, 2015 @12:44PM (#10035736)
This is good. There are lots of lists like this; you might find additional strings to add to it here:

https://code.google.com/p/fuzzdb/

Fuzz lists are to web pentesters what drain snakes are to plumbers.

[ Parent | on HN ]
Re:Show HN: Big List of Naughty Strings for testing user-inp... by janfry on Monday August 10, 2015 @01:19PM (#10035939)
Another good list that incorporates FuzzDB: https://github.com/danielmiessler/SecLists

As other commenters noted, strings like DROP TABLES should be used with caution!

[ Parent | on HN ]