kimswe / fuzzdb Goto Github PK

What steps will reproduce the problem?
1.
2.
3.
http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live-stream
ing-ncaaf

http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live-stream
ing-ncaaf


http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live-stream
ing-ncaaf
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

[deleted issue]

[deleted issue]

What steps will reproduce the problem?
1.
2.
3. 
http://www.rf-dimension.com/forum/entry.php?70656-Football%28Chicago-Bears-vs-Gr
een-Bay-Packers%29-Live-Streaming

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.
http://www.rf-dimension.com/forum/entry.php?70656-Football%28Chicago-Bears-vs-Gr
een-Bay-Packers%29-Live-Streaming

http://www.rf-dimension.com/forum/entry.php?70656-Football%28Chicago-Bears-vs-Gr
een-Bay-Packers%29-Live-Streaming
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

[deleted issue]

What steps will reproduce the problem?
1.
2.
3.

What is the 
expectehttp://www.rf-dimension.com/forum/entry.php?72445-NFL-FOX-CBS-!!-Baltimor
e-Ravens-vs-Tennessee-Titans-live-2014-Stream

http://www.rf-dimension.com/forum/entry.php?72445-NFL-FOX-CBS-!!-Baltimore-Raven
s-vs-Tennessee-Titans-live-2014-Streamd output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3. 
http://www.rf-dimension.com/forum/entry.php?70656-Football%28Chicago-Bears-vs-Gr
een-Bay-Packers%29-Live-Streaming
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

[deleted issue]

[deleted issue]

[deleted issue]

[deleted issue]

https://community.waldenu.edu/message/8564#8564https://community.waldenu.edu/mes
sage/8564#8564https://community.waldenu.edu/message/8564#8564https://community.w
aldenu.edu/message/8564#8564https://community.waldenu.edu/message/8564#8564https
://community.waldenu.edu/message/8564#8564https://community.waldenu.edu/message/
8564#8564

What steps will reproduce the problem?
1. In Mozilla - open 
fuzzdb-1.09.tgz\fuzzdb-1.09\attack-payloads\sql-injection\detect\docs\docs.sql_i
njection_cheetsheet.html 

What is the expected output? What do you see instead?
Expect to a harmless document.

File has characters that cant be read. If you click through and open - you 
start getting 'security vulnerability detected'  popups.

What version of the product are you using? On what operating system?
Tarball - fuzzdb-1.09.tgz

Please provide any additional information below.
Could be something else on my machine, but just in case, submitting this

Added some services found on Oracle SOA Suite 11g 

Jacco van Tuijl

What steps will reproduce the problem?
1.
2.
3.
https://community.waldenu.edu/message/8564#8564
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3. 
http://www.nureyev-medical.org/forum/virginia-tech-vs-duke-live-streaming-ncaaf-
football-2014-online-tv-pchttp://www.nureyev-medical.org/forum/virginia-tech-vs-
duke-live-streaming-ncaaf-football-2014-online-tv-pchttp://www.nureyev-medical.o
rg/forum/virginia-tech-vs-duke-live-streaming-ncaaf-football-2014-online-tv-pcht
tp://www.nureyev-medical.org/forum/virginia-tech-vs-duke-live-streaming-ncaaf-fo
otball-2014-online-tv-pchttp://www.nureyev-medical.org/forum/virginia-tech-vs-du
ke-live-streaming-ncaaf-football-2014-online-tv-pchttp://www.nureyev-medical.org
/forum/virginia-tech-vs-duke-live-streaming-ncaaf-football-2014-online-tv-pcrum/
virginia-tech-vs-duke-live-streaming-ncaaf-football-2014-online-tv-pc
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected 
ouhttphttp://www.hidesertstar.com/calendar/event_7b6c28c8-6cd4-11e4-9752-cb6a3e4
f46f4.html://www.hidesertstar.com/calendar/event_7b6c28c8-6cd4-11e4-9752-cb6a3e4
f46f4.htmltput? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3. 
http://www.rf-dimension.com/forum/entry.php?72445-NFL-FOX-CBS-!!-Baltimore-Raven
s-vs-Tennessee-Titans-live-2014-Stream

http://www.rf-dimension.com/forum/entry.php?72445-NFL-FOX-CBS-!!-Baltimore-Raven
s-vs-Tennessee-Titans-live-2014-Stream

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

The double dash syntax in MySQL requires a space before the comment text. Also 
added the # comment syntax.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?
http://www.hidesertstar.com/calendar/event_a9193766-6cd4-11e4-a782-db98ad61e9e0.
html

http://www.hidesertstar.com/calendar/event_a9193766-6cd4-11e4-a782-db98ad61e9e0.
html

http://www.hidesertstar.com/calendar/event_a9193766-6cd4-11e4-a782-db98ad61e9e0.
html

What version of the product are you using? On what operating system?


Please provide any additional information below.

[deleted issue]

What steps will reproduce the problem?
1.
2.
3.
http://www.rf-dimension.com/fhttp://www.rf-dimension.com/forum/entry.php?72445-N
FL-FOX-CBS-!!-Baltimore-Ravens-vs-Tennessee-Titans-live-2014-Streamorum/entry.ph
p?72445-NFL-FOX-CBS-!!-Baltimore-Ravens-vs-Tennessee-Titans-live-2014-Stream
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected 
ouhttp://www.hidesertstar.com/calendar/event_7b6c28c8-6cd4-11e4-9752-cb6a3e4f46f
4.htmltput? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected 
output?http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live
-streaming-ncaaf

http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live-stream
ing-ncaaf

http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live-stream
ing-ncaaf What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2. 
http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live-stream
ing-ncaaf

http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live-stream
ing-ncaaf

http://www.nureyev-medical.org/forum/footballclemson-vs-georgia-tech-live-stream
ing-ncaaf

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What 
dohttp://www.hidesertstar.com/calendar/event_7b6c28c8-6cd4-11e4-9752-cb6a3e4f46f
4.html

http://www.hidesertstar.com/calendar/event_7b6c28c8-6cd4-11e4-9752-cb6a3e4f46f4.
html you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected 
outphttp://clients.mysportsite.com/clemsongeorgiatech.com/index.php?p=forum&foru
mID=1&threadID=87965

http://clients.mysportsite.com/clemsongeorgiatech.com/index.php?p=forum&forumID=
1&threadID=87965

http://clients.mysportsite.com/clemsongeorgiatech.com/index.php?p=forum&forumID=
1&threadID=87965ut? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.
https://community.waldenu.edu/message/8564#8564
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

[deleted issue]

Added SAP URLs from Metasploit SAP URL Scanner: sap_icm_paths.txt

http://code.google.com/p/fuzzdb/source/browse/trunk/attack-payloads/sql-injectio
n/detect/GenericBlind.fuzz.txt?spec=svn138&r=138

The following payloads are totally useless, becase of return type for pg_sleep 
is void and this creates a Postgresql error.

1 or pg_sleep(__TIME__)--
" or pg_sleep(__TIME__)--
' or pg_sleep(__TIME__)--
1) or pg_sleep(__TIME__)--
") or pg_sleep(__TIME__)--
') or pg_sleep(__TIME__)--
1)) or pg_sleep(__TIME__)--
")) or pg_sleep(__TIME__)--
')) or pg_sleep(__TIME__)--

First off, thank you for taking the time to organize and maintain a fuzzing
"database".

I noticed that many of the files in the fuzzing "database" are TXT files.
There are better file formats which support things such as comments,
multi-line Strings, binary Strings, Arrays, Hashes, tags, etc. I propose
converting the files in "attack-payloads", "discovery" and "regex" to the
YAML file format (http://www.yaml.org/). YAML is supported by all widely
used programming languages and can automatically serialize/deserialize data.

[deleted issue]

What steps will reproduce the problem?
1.
2.
3.
https://community.waldenu.edu/message/8564#8564
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected outhttps://community.waldenu.edu/message/8564#8564put? 
What do you see instead?


What version of the product ahttps://community.waldenu.edu/message/8564#8564re 
you using? On what operating system?


Please provide any additional information below.

[deleted issue]

This may be added to webbackdoor.

http://www.aspheute.com/english/20000802.asp

[deleted issue]

What steps will reproduce the problem?
1.
2.
3. 
http://www.rf-dimension.com/forum/entry.php?70656-Football%28Chicago-Bears-vs-Gr
een-Bay-Packers%29-Live-Streaming

http://www.rf-dimension.com/forum/entry.php?70656-Football%28Chicago-Bears-vs-Gr
een-Bay-Packers%29-Live-Streaming

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

Depending on the revision of fuzzdb file names may change capitalization 
(RandomFiles.fuzz.txt to Randomfiles.fuzz.txt, discovery to Discovery, 
CGI_HTTP_POST_WINDOWS.fuzz.txt to CGI_HTTP_POST_Windows.fuzz.txt), location 
(disclosure-directory/generic/directory-indexing-generic.txt to 
disclosure-directory/directory-indexing-generic.txt) or name 
(xpath-injection.txt to xpath-injection.fuzz.txt).

Though location changes are often better for logical organization, 
capitalization and file naming changes are generally not. A standard naming 
convention that specifies capitalization and name would significantly improve 
the forward compatibility of code written to use fuzzdb. 

What steps will reproduce the problem?
1.
2.
3.
http://clients.mysportsite.com/clemsongeorgiatech.com/index.php?p=forum&forumID=
1&threadID=87965
What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

http://clients.mysportsite.com/clemsongeorgiatech.com/index.php?p=forum&forumID=
1&threadID=87965

http://clients.mysportsite.com/clemsongeorgiatech.com/index.php?p=forum&forumID=
1&threadID=87965


http://clients.mysportsite.com/clemsongeorgiatech.com/index.php?p=forum&forumID=
1&threadID=87965

[deleted issue]

What steps will reproduce the problem?
1.
2.
3. https://community.waldenu.edu/message/8564#8564

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3. 
http://www.nureyev-medical.org/forum/virginia-tech-vs-duke-live-streaming-ncaaf-
football-2014-online-tv-pc

http://www.nureyev-medical.org/forum/virginia-tech-vs-duke-live-streaming-ncaaf-
football-2014-online-tv-pc

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3. 
http://www.nureyev-medical.org/forum/virginia-tech-vs-duke-live-streaming-ncaaf-
football-2014-online-tv-pc

http://www.nureyev-medical.org/forum/virginia-tech-vs-duke-live-streaming-ncaaf-
football-2014-online-tv-pc

http://www.nureyev-medical.org/forum/virginia-tech-vs-duke-live-streaming-ncaaf-
football-2014-online-tv-pc

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3. https://community.waldenu.edu/message/8564#8564

https://community.waldenu.edu/message/8564#8564

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?
https://community.waldenu.edu/message/8564#8564

What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?
http://www.hidesertstar.com/calendar/event_7b6c28c8-6cd4-11e4-9752-cb6a3e4f46f4.
html

What version of the 
prohttp://www.hidesertstar.com/calendar/event_7b6c28c8-6cd4-11e4-9752-cb6a3e4f46
f4.htmlduct are you using? On what operating system?


Please provide any additional information below.