Skip to content

Commit c0be11b

Browse files
g0tmi1kg0tmi1k
authored
Merge pull request danielmiessler#769 from ivan-sincek/master
Fuzz amounts, quantities, or any other numerical values. Source: https://research.nccgroup.com/wp-content/uploads/2020/07/common_security_issues_in_financially-orientated_web.pdf https://github.com/ivan-sincek/amounts
2 parents 3217b9b + 28152a1 commit c0be11b

File tree

11 files changed

+1105
-0
lines changed

11 files changed

+1105
-0
lines changed

‎Fuzzing/Amounts/README.md‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
# Amounts
2+
3+
Pre-generated wordlists based on [Common Security Issues in Financially-Oriented Web Applications](https://research.nccgroup.com/wp-content/uploads/2020/07/common_security_issues_in_financially-orientated_web.pdf) PDF.
4+
5+
Created to fuzz amounts, quantities, or any other numerical values.
6+
7+
Bypass minimum and maximum restrictions, cause unintended behavior and errors, etc.
8+
9+
Tool to create such wordlists can be found at [ivan-sincek/amounts](https://github.com/ivan-sincek/amounts). Feel free to create and add more wordlists on your own. Works with integer and float numerical values.

‎Fuzzing/Amounts/all.txt‎

Lines changed: 388 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,388 @@
1+
0
2+
000
3+
0.00
4+
0,00
5+
+0
6+
0+
7+
-0
8+
0-
9+
$0
10+
$-0
11+
-$0
12+
£0
13+
£-0
14+
-£0
15+
€0
16+
€-0
17+
-€0
18+
()
19+
(,,)
20+
(0)
21+
(0,1)
22+
("0")
23+
("0","1")
24+
[]
25+
[,,]
26+
[0]
27+
[0,1]
28+
["0"]
29+
["0","1"]
30+
{}
31+
{,,}
32+
{0}
33+
{0,1}
34+
{"0"}
35+
{"0","1"}
36+
-1
37+
1
38+
NaN
39+
-NaN
40+
Infinity
41+
-Infinity
42+
inf
43+
-inf
44+
0b0
45+
0x0
46+
&h00
47+
&hff
48+
0.00000000000000000000000000000000000000000000000001
49+
1e-50
50+
0e0
51+
true
52+
false
53+
+1
54+
null
55+
None
56+
nil
57+
An Array
58+
%20%090
59+
0%20%00%00
60+
-2147483648
61+
2147483647
62+
4294967295
63+
-2147483649
64+
2147483648
65+
4294967296
66+
99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
67+
9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
68+
999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
69+
-9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
70+
-999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
71+
-99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
72+
0.1
73+
000.1
74+
0,1
75+
+0.1
76+
0.1+
77+
-0.1
78+
0.1-
79+
$0.1
80+
$-0.1
81+
-$0.1
82+
£0.1
83+
£-0.1
84+
-£0.1
85+
€0.1
86+
€-0.1
87+
-€0.1
88+
(0.1)
89+
(0.1,1.1)
90+
("0.1")
91+
("0.1","1.1")
92+
[0.1]
93+
[0.1,1.1]
94+
["0.1"]
95+
["0.1","1.1"]
96+
{0.1}
97+
{0.1,1.1}
98+
{"0.1"}
99+
{"0.1","1.1"}
100+
-0.9
101+
1.1
102+
0b00111101110011001100110011001101
103+
0x1.999999999999ap-4
104+
0.1e0
105+
0.1e-1
106+
0.1e1
107+
%20%090.1
108+
0.1%20%00%00
109+
001
110+
1.00
111+
1,00
112+
1+
113+
1-
114+
$1
115+
$-1
116+
-$1
117+
£1
118+
£-1
119+
-£1
120+
€1
121+
€-1
122+
-€1
123+
(1)
124+
(1,2)
125+
("1")
126+
("1","2")
127+
[1]
128+
[1,2]
129+
["1"]
130+
["1","2"]
131+
{1}
132+
{1,2}
133+
{"1"}
134+
{"1","2"}
135+
2
136+
0b1
137+
0x1
138+
1e0
139+
1e-1
140+
1e1
141+
%20%091
142+
1%20%00%00
143+
10
144+
0010
145+
10.00
146+
10,00
147+
+10
148+
10+
149+
-10
150+
10-
151+
$10
152+
$-10
153+
-$10
154+
£10
155+
£-10
156+
-£10
157+
€10
158+
€-10
159+
-€10
160+
(10)
161+
(10,11)
162+
("10")
163+
("10","11")
164+
[10]
165+
[10,11]
166+
["10"]
167+
["10","11"]
168+
{10}
169+
{10,11}
170+
{"10"}
171+
{"10","11"}
172+
9
173+
11
174+
0b1010
175+
0xa
176+
10e0
177+
10e-1
178+
10e1
179+
1,,0
180+
%20%0910
181+
10%20%00%00
182+
100
183+
00100
184+
100.00
185+
100,00
186+
+100
187+
100+
188+
-100
189+
100-
190+
$100
191+
$-100
192+
-$100
193+
£100
194+
£-100
195+
-£100
196+
€100
197+
€-100
198+
-€100
199+
(100)
200+
(100,101)
201+
("100")
202+
("100","101")
203+
[100]
204+
[100,101]
205+
["100"]
206+
["100","101"]
207+
{100}
208+
{100,101}
209+
{"100"}
210+
{"100","101"}
211+
99
212+
101
213+
0b1100100
214+
0x64
215+
100e0
216+
100e-1
217+
100e1
218+
1,,0,,0
219+
%20%09100
220+
100%20%00%00
221+
1000
222+
1 000
223+
1.000
224+
1,000
225+
001000
226+
1000.00
227+
1000,00
228+
+1000
229+
1000+
230+
-1000
231+
1000-
232+
$1000
233+
$-1000
234+
-$1000
235+
£1000
236+
£-1000
237+
-£1000
238+
€1000
239+
€-1000
240+
-€1000
241+
(1000)
242+
(1000,1001)
243+
("1000")
244+
("1000","1001")
245+
[1000]
246+
[1000,1001]
247+
["1000"]
248+
["1000","1001"]
249+
{1000}
250+
{1000,1001}
251+
{"1000"}
252+
{"1000","1001"}
253+
999
254+
1001
255+
0b1111101000
256+
0x3e8
257+
1000e0
258+
1000e-1
259+
1000e1
260+
1,,0,,0,,0
261+
%20%091000
262+
1000%20%00%00
263+
10000
264+
10 000
265+
10.000
266+
10,000
267+
0010000
268+
10000.00
269+
10000,00
270+
+10000
271+
10000+
272+
-10000
273+
10000-
274+
$10000
275+
$-10000
276+
-$10000
277+
£10000
278+
£-10000
279+
-£10000
280+
€10000
281+
€-10000
282+
-€10000
283+
(10000)
284+
(10000,10001)
285+
("10000")
286+
("10000","10001")
287+
[10000]
288+
[10000,10001]
289+
["10000"]
290+
["10000","10001"]
291+
{10000}
292+
{10000,10001}
293+
{"10000"}
294+
{"10000","10001"}
295+
9999
296+
10001
297+
0b10011100010000
298+
0x2710
299+
10000e0
300+
10000e-1
301+
10000e1
302+
1,,0,,0,,0,,0
303+
%20%0910000
304+
10000%20%00%00
305+
100000
306+
100 000
307+
100.000
308+
100,000
309+
00100000
310+
100000.00
311+
100000,00
312+
+100000
313+
100000+
314+
-100000
315+
100000-
316+
$100000
317+
$-100000
318+
-$100000
319+
£100000
320+
£-100000
321+
-£100000
322+
€100000
323+
€-100000
324+
-€100000
325+
(100000)
326+
(100000,100001)
327+
("100000")
328+
("100000","100001")
329+
[100000]
330+
[100000,100001]
331+
["100000"]
332+
["100000","100001"]
333+
{100000}
334+
{100000,100001}
335+
{"100000"}
336+
{"100000","100001"}
337+
99999
338+
100001
339+
0b11000011010100000
340+
0x186a0
341+
100000e0
342+
100000e-1
343+
100000e1
344+
1,,0,,0,,0,,0,,0
345+
%20%09100000
346+
100000%20%00%00
347+
1000000
348+
1 000 000
349+
1.000.000
350+
1,000,000
351+
001000000
352+
1000000.00
353+
1000000,00
354+
+1000000
355+
1000000+
356+
-1000000
357+
1000000-
358+
$1000000
359+
$-1000000
360+
-$1000000
361+
£1000000
362+
£-1000000
363+
-£1000000
364+
€1000000
365+
€-1000000
366+
-€1000000
367+
(1000000)
368+
(1000000,1000001)
369+
("1000000")
370+
("1000000","1000001")
371+
[1000000]
372+
[1000000,1000001]
373+
["1000000"]
374+
["1000000","1000001"]
375+
{1000000}
376+
{1000000,1000001}
377+
{"1000000"}
378+
{"1000000","1000001"}
379+
999999
380+
1000001
381+
0b11110100001001000000
382+
0xf4240
383+
1000000e0
384+
1000000e-1
385+
1000000e1
386+
1,,0,,0,,0,,0,,0,,0
387+
%20%091000000
388+
1000000%20%00%00

0 commit comments

Comments
 (0)