From 52f1658a0c55bf787c0ad1130ef0beaf8e77f078 Mon Sep 17 00:00:00 2001 From: Luke Paris Date: Thu, 17 Sep 2020 15:02:40 +0200 Subject: [PATCH] Removed destructive SQL statements Those two lines are downright irresponsible, someone is going to use this list to fuzz a web application and accidentally nuke a production database. --- Fuzzing/big-list-of-naughty-strings.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Fuzzing/big-list-of-naughty-strings.txt b/Fuzzing/big-list-of-naughty-strings.txt index 4d0c3da..03c8e25 100644 --- a/Fuzzing/big-list-of-naughty-strings.txt +++ b/Fuzzing/big-list-of-naughty-strings.txt @@ -543,8 +543,8 @@ http://a/%%30%30 # # Strings which can cause a SQL injection if inputs are not sanitized -1;DROP TABLE users -1'; DROP TABLE users-- 1 +1; SELECT 1 +1'; SELECT 1-- 1 ' OR 1=1 -- 1 ' OR '1'='1