https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet based on the RSnake original http://ha.ckers.org/xss.html Retrieved on 2013-11-20 Much of this wildly obsolete
'';!--"=&{()}
| /* | |
| This brute force algorithm was originally written (by me) back in 1998, and has been collecting dust | |
| since then. However, for the purpose of testing Gist on GitHub I decided to rewrite the algorithm | |
| from VB6 to C#, make some improvements and release this fast, compact, non-recursive, brute force | |
| algorithm under the MIT license: http://opensource.org/licenses/MIT | |
| Notes: | |
| - Do a run with testLetters = "0123456789" and testLength = 3, to see what happens | |
| - Remember to keep the callback testCalback as fast as possible | |
| - Tweet some love to @fredrikdev :) |
| function toHex(s) { | |
| // utf8 to latin1 | |
| var s = unescape(encodeURIComponent(s)) | |
| var h = '' | |
| for (var i = 0; i < s.length; i++) { | |
| h += s.charCodeAt(i).toString(16) | |
| } | |
| return h | |
| } |
| #!/usr/bin/perl -w | |
| use strict; | |
| use IO::Socket::INET; | |
| use IO::Socket::SSL; | |
| use Getopt::Long; | |
| use Config; | |
| $SIG{'PIPE'} = 'IGNORE'; #Ignore broken pipe errors | |
| print <<EOTEXT; |
| #!/usr/bin/perl -w | |
| use strict; | |
| use IO::Socket::INET; | |
| use IO::Socket::SSL; | |
| use Getopt::Long; | |
| use Config; | |
| $SIG{'PIPE'} = 'IGNORE'; #Ignore broken pipe errors | |
| print <<EOTEXT; |
https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet based on the RSnake original http://ha.ckers.org/xss.html Retrieved on 2013-11-20 Much of this wildly obsolete
'';!--"=&{()}
| using System; | |
| using System.Collections.Generic; | |
| using System.IO; | |
| using System.Text.RegularExpressions; | |
| using System.Xml; | |
| using System.Xml.Linq; | |
| namespace Formix.Utils | |
| { | |
| class Program |