{
"login": "admin<script>alert('hi')</script>",
"password": "password"
}85. Negative numbers as strings:
{
"login": "-123",
"password": "-456"
}86. Values as URLs:
{
"login": "https://admin.com",
"password": "https://password.com"
}87. Strings with email format:
{
"login": "admin@admin.com",
"password": "password@password.com"
}88. Strings with IP address format:
{
"login": "192.0.2.0",
"password": "203.0.113.0"
}89. Strings with date format:
{
"login": "2023-08-03",
"password": "2023-08-04"
}90. JSON with exponential values:
{
"login": 1e+30,
"password": 1e+30
}91. JSON with negative exponential values:
{
"login": -1e+30,
"password": -1e+30
}92. Using Zero Width Space (U+200B) in strings:
{
"login": "admin​",
"password": "password​"
}93. Using Zero Width Joiner (U+200D) in strings:
{
"login": "adminâ€",
"password": "passwordâ€"
}94. JSON with extremely large numbers:
{
"login": 12345678901234567890,
"password": 12345678901234567890
}95. Strings with backspace characters:
{
"login": "admin\b",
"password": "password\b"
}96. Test with emoji in strings:
{
"login": "admin😀",
"password": "password😀"
}97. JSON with comments, although they are not officially supported in JSON:
{
/*"login": "admin",
"password": "password"*/
}98. JSON with base64 encoded values:
{
"login": "YWRtaW4=",
"password": "cGFzc3dvcmQ="
}99. Including null byte character (may cause truncation):
{
"login": "admin\0",
"password": "password\0"
}100. JSON with credentials in scientific notation:
{
"login": 1e100,
"password": 1e100
}102. Strings with octal values:
{
"login": "\141\144\155\151\156",
"password":"\160\141\163\163\167\157\162\144"
}103.
{
root:{
"username": "admin",
"password":"admin"
}
}104.
basic => usernam-dmin
username[]=ad
username[0]=a
username=admin&user name-auin
delete username=admin
برای دریافت بهروزرسانیهای امنیتی روزانه، و اخبار امنیت سایبری مارو به عنوان منبع مورد نظر خود دنبال کنید ->❤️💻
GROUP ™️
@mandegar_sec | channel