Mandegar SEC🎩 on Telegram: “41. Only keys, without values: { "login":, "pass…”

41. Only keys, without values:

{
"login":,
"password":
}

42. Insertion of control characters:

{
"login": "ad\u0000min",
"password": "pass\u0000word"
}

43. Long Unicode Strings:

{
"login": "\u0061"*10000,
"password": "\u0061"*10000
}

44. Newline Characters in Strings:

{
"login": "ad\nmin",
"password": "pa\nssword"
}

45. Tab Characters in Strings:

{
"login": "ad\tmin",
"password": "pa\tssword"
}

46. Test with HTML content in Strings:

{
"login": "<b>admin",
"password": "password"
}

47. JSON Injection in Strings:

{
"login": "{\"injection\":\"value\"}",
"password": "password"
}

48. Test with XML content in Strings:

{
"login": "admin",
"password": "password"
}

49. Combination of Number, Strings, and Special characters:

{
"login": "ad123min!@",
"password": "pa55w0rd!@"
}

50. Use of environment variables:

{
"login": "${USER}",
"password": "${PASS}"
}

51. Backslashes in Strings:

{
"login": "ad\\min",
"password": "pa\\ssword"
}

52. Long strings of special characters:

{
"login": "!@#$%^&*()"*1000,
"password": "!@#$%^&*()"*1000
}

53. Empty Key in JSON:

{
"": "admin",
"password": "password"
}

55. JSON Injection in Key:

{
"{\"injection\":\"value\"}
": "admin",
"password": "password"
}

56. Quotation marks in strings:

{
"login": "\"admin\"",
"password": "\"password\""
}

57. Credentials as nested arrays:

{
"login": [["admin"]],
"password": [["password"]]
}

58. Credentials as nested objects:

{
"login": {"username": {"value": "admin",
"password": {"password": {"value":
"password"
}

59. Keys as numbers:

{
123: "admin",
456: "password"
}

60. Testing with greater than and less than signs:

{
"login": "admin>1",
"password": "<password"
}

61. Testing with parentheses in credentials:

{
"login": "(admin)",
"password": "(password)"
}

62. Credentials containing slashes:

{
"login": "admin/user",
"password": "pass/word"
}

63. Credentials containing multiple data types:

{
"login": ["admin",
123,
true,
null,
{"username": ["admin"],
"password": ["password",
123,
false,
null,
{"password": "password"]}}
}

64. Using escape sequences:

{
"login": "admin\\r\\n\\t",
"password": "password\\r\\n\\t"
}

65. Using curly braces in strings:

{
"login": "{admin}",
"password": "{password}"
}

66. Using square brackets in strings:

{
"login": "[admin]",
"password": "[password]"
}

68. Strings with only special characters:

{
"login": "!@#$$%^&*()",
"password": "!@#$$%^&*()"
}

69. Strings with control characters:

{
"login": "admin\b\f\n\r\t\v\0",
"password": "password\b\f\n\r\t\v\0"
}

71. Null characters in strings:

{
"login": "admin\0",
"password": "password\0"
}

72. Exponential numbers as strings:

{
"login": "1e5",
"password": "1e10"
}

73. Hexadecimal numbers as strings:

{
"login": "0xabc",
"password": "0x123"
}

74. Leading zeros in numeric strings:

{
"login": "000123",
"password": "000456"
}

75. Multilingual input (here, English and Korean):

{
"login": "adminê´€ë¦¬ìž",
"password": "passwordë¹„ë°€ë²ˆí˜¸"
}

76. Extremely long keys:

{
"a"*10000: "admin",
"b"*10000: "password"
}

78. Extremely long unicode strings:

{
"login": "\u0061"*10000,
"password": "\u0062"*10000
}

79. JSON strings with semicolon:

{
"login": "admin;",
"password": "password;"
}

80. JSON strings with backticks:

{
"login": "`admin`",
"password": "`password`"
}

81. JSON strings with plus sign:

{
"login": "admin+",
"password": "password+"
}

82. JSON strings with equal sign:

{
"login": "admin=",
"password": "password="
}

83. Strings with Asterisk (*) Symbol:

{
"login": "admin*",
"password": "password*"
}

برای دریافت به‌روزرسانی‌های امنیتی روزانه، و اخبار امنیت سایبری مارو به عنوان منبع مورد نظر خود دنبال کنید ->❤️💻
GROUP ™️
@mandegar_sec | channel