naughty-strings

A curated list of testing resources

The Repository contains various payloads, tools, tips and tricks from various hackers around the world. Please take a quick look down here 👇👇

NodeJS module to check Naughty Strings, it is a set of strings which have a high probability of causing issues when used as user-input data.

A node.js library that returns naughty strings from an offline database of Big List of Naughty Strings and emojis.

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

Big list of naughty strings for Kotlin/Java (Under construction)

A python library that returns naughty strings from an offline database of Big List of Naughty Strings and emojis.

Type awkward test values into any field with one shortcut. 18 packs of values that break forms: invisible Unicode, trailing spaces, impossible dates, length limits, CSV formulas. Each says what it breaks. GUI + CLI

Edge case test inputs for JavaScript and TypeScript: time zones, DST, unicode strings, -0 and NaN, URLs, paths and JSON. Drop into test.each in Vitest, Jest or node:test.

A thorough, unified compilation of payloads, instruments, methods, and assets for bug bounty seekers and penetration testers globally. This archive embodies numerous years of amassed understanding, private exploration, and communal submissions.