Skip to content

Commit 174a6e0

Browse files
phxa1phxa1
authored
Merge pull request #25 from safe1ine/tcs
Some samples containing false positive keywords
2 parents 71849f8 + 06114a3 commit 174a6e0

25 files changed

+442
-0
lines changed

‎testcases/00/02/95284b1305474e3a365ca48db426.white‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
POST /cgi/capi?cmd=DescribeSiteMsgSummary&action=delegate&serviceType=message&secure=1&version=3&dictId=2363&sts=1&t=1688384173529&uin=100003290640&ownerUin=100003290640&csrfCode=2093508630&msg=1%20and%201=1%20is%20a%20very%20basic%20mathematical%20operation HTTP/1.1
2+
Host: console.cloud.tencent.com
3+
Content-Length: 101
4+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
5+
X-Life: 1048
6+
Sec-Ch-Ua-Mobile: ?0
7+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
8+
Content-Type: application/json
9+
Accept: application/json, text/javascript, */*; q=0.01
10+
X-Requested-With: XMLHttpRequest
11+
X-Lid: Sk-3z4xFh
12+
Sec-Ch-Ua-Platform: "Windows"
13+
Origin: https://console.cloud.tencent.com
14+
Sec-Fetch-Site: same-origin
15+
Sec-Fetch-Mode: cors
16+
Sec-Fetch-Dest: empty
17+
Referer: https://console.cloud.tencent.com/message/detail/547411489
18+
Accept-Encoding: gzip, deflate
19+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
20+
21+
{"regionId":1,"serviceType":"message","cmd":"DescribeSiteMsgSummary","data":{"Version":"2018-12-25"}}

‎testcases/00/06/005a52981dd324c40488a1a588f9.white‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
POST /speed?id=9GkL9SLGjnYrr8bJd6&uin=&version=1.35.26&content=For%20people%20who%20write%20code,%20the%20ability%20of%20compiled%20languages%20%E2%80%8B%E2%80%8B<script%20%20ability,%20but%20it%20>%20the%20capabilities%20of%20regular%20expressions&aid=9f77cd42-08ce-4d1b-9d16-42d90e1f7792&env=production&platform=3&netType=4&vp=0%20*%200&sr=1920%20*%201080&sessionId=session-1688375712738&from=https%3A%2F%2Fwebpage.qidian.qq.com%2Fqidian%2Fchatv3%2Fpc.html&referer=https%3A%2F%2Fmodao.cc%2F HTTP/1.1
2+
Host: rumt-zh.com
3+
Content-Length: 678
4+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
5+
Sec-Ch-Ua-Platform: "Windows"
6+
Sec-Ch-Ua-Mobile: ?0
7+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
8+
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryJl8O6PWudNUIcH6F
9+
Accept: */*
10+
Origin: https://webpage.qidian.qq.com
11+
Sec-Fetch-Site: cross-site
12+
Sec-Fetch-Mode: cors
13+
Sec-Fetch-Dest: empty
14+
Referer: https://webpage.qidian.qq.com/
15+
Accept-Encoding: gzip, deflate
16+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
17+
18+
------WebKitFormBoundaryJl8O6PWudNUIcH6F
19+
Content-Disposition: form-data; name="payload"
20+
21+
{"duration":{"fetch":[],"static":[{"url":"https://bqq.gtimg.com/CDN/source/audio/ring.mp3","method":"get","duration":144.9,"status":200,"type":"static","isHttps":true,"urlQuery":"","domainLookup":0,"connectTime":0}]},"id":"9GkL9SLGjnYrr8bJd6","uin":"","version":"1.35.26","aid":"9f77cd42-08ce-4d1b-9d16-42d90e1f7792","env":"production","platform":3,"netType":4,"vp":"0 * 0","sr":"1920 * 1080","sessionId":"session-1688375712738","from":"https%3A%2F%2Fwebpage.qidian.qq.com%2Fqidian%2Fchatv3%2Fpc.html","referer":"https%3A%2F%2Fmodao.cc%2F"}
22+
------WebKitFormBoundaryJl8O6PWudNUIcH6F--

‎testcases/00/07/00071dbf87818e947d2690e9a9ed9c3b.white‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
POST /i/14029/da/?type=multi&wid=695672&sid=CC44727D8E38AE81538BAA13BD4D0A2545&pvid=1688382620847&dnt=1&dc=The%20union%20leaders%20select%20their%20representatives%20from%20among%20the%20members.&dv=1&dl=337&retryCode=socketNotConnected HTTP/1.1
2+
Host: collection.decibelinsight.net
3+
Content-Length: 337
4+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
5+
Content-Type: text/plain;charset=UTF-8
6+
Accept: */*
7+
Origin: https://www.ibm.com
8+
Sec-Fetch-Site: cross-site
9+
Sec-Fetch-Mode: cors
10+
Sec-Fetch-Dest: empty
11+
Accept-Encoding: gzip, deflate
12+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
13+
14+
[{"type":"proxyUrls","data":{"prefix":"https://proxy.decibelinsight.net/v2-us-east-1/695672/2023-07-03/www.ibm.com/","items":["https/collector-12553.tvsquared.com/tv2track.php?idsite=TV-8172454563-1&rec=1&rand=%3CRANDOMNUMBER","https/collector-12553.tvsquared.com/tv2track.php?idsite=TV-8172454563-1&rec=1&rand=9167618174"]},"offset":0}]

‎testcases/00/74/00741c5954a957427dc6da810e141d68.white‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
GET /new/helloService.ashx?vg=We%20need%20to%20select%20a%20few%20items%20from%20this%20list%20for%20family%20next%20meeting.80&_=1688375748903 HTTP/1.1
2+
Host: passport.jd.com
3+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
4+
Sec-Ch-Ua-Mobile: ?0
5+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
6+
Sec-Ch-Ua-Platform: "Windows"
7+
Accept: */*
8+
Sec-Fetch-Site: same-site
9+
Sec-Fetch-Mode: no-cors
10+
Sec-Fetch-Dest: script
11+
Referer: https://search.jd.com/
12+
Accept-Encoding: gzip, deflate
13+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
14+

‎testcases/00/91/00914c32c3c93681ab05d607a6beaccf.white‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
GET /fd/ls/l?IG=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively.&Type=Event.ClientInst&DATA=[{%22T%22:%22Info%22,%22FID%22:%22CI%22,%22Name%22:%22HasRR%22,%22Text%22:%221%22}] HTTP/1.1
2+
Host: cn.bing.com
3+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
4+
Sec-Ch-Ua-Mobile: ?0
5+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
6+
Sec-Ch-Ua-Arch: "x86"
7+
Sec-Ch-Ua-Full-Version: "114.0.5735.199"
8+
Sec-Ch-Ua-Platform-Version: "15.0.0"
9+
Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
10+
Sec-Ch-Ua-Bitness: "64"
11+
Sec-Ch-Ua-Model: ""
12+
Sec-Ch-Ua-Platform: "Windows"
13+
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
14+
Sec-Fetch-Site: same-origin
15+
Sec-Fetch-Mode: no-cors
16+
Sec-Fetch-Dest: image
17+
Referer: https://cn.bing.com/search?q=site:segmentfault.com%20/static/css/static/fonts/abc.woff
18+
Accept-Encoding: gzip, deflate
19+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
20+

‎testcases/2d/21/2d210b84c723363f537696bc7e93ab39.white‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
GET /hopecgi?g_tk=1508769380&r=0.34307666399664916&callback=_CallbackjudgeLogin&cmd=judgeLogin&appid=1109634837&uin=389264167&msg=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
2+
Host: game.qzone.qq.com
3+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
4+
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
5+
X-Requested-With: XMLHttpRequest
6+
Sec-Ch-Ua-Mobile: ?0
7+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
8+
Sec-Ch-Ua-Platform: "Windows"
9+
Sec-Fetch-Site: same-origin
10+
Sec-Fetch-Mode: cors
11+
Sec-Fetch-Dest: empty
12+
Referer: https://game.qzone.qq.com/1109634837?via=QZSTORE.V6.TOP-WEEKLY&loginFromAppcenter=1688379348042
13+
Accept-Encoding: gzip, deflate
14+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
15+
Connection: close
16+

‎testcases/2d/21/d81bef68377edb19334c4f4fa79fbcd1.white‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
GET /hopecgi?g_tk=1508769380&r=0.34307666399664916&callback=_CallbackjudgeLogin&cmd=judgeLogin&appid=1109634837&uin=389264167&msg=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
2+
Host: game.qzone.qq.com
3+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
4+
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
5+
X-Requested-With: XMLHttpRequest
6+
Sec-Ch-Ua-Mobile: ?0
7+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
8+
Sec-Ch-Ua-Platform: "Windows"
9+
Sec-Fetch-Site: same-origin
10+
Sec-Fetch-Mode: cors
11+
Sec-Fetch-Dest: empty
12+
Referer: https://game.qzone.qq.com/1109634837?via=QZSTORE.V6.TOP-WEEKLY&loginFromAppcenter=1688379348042
13+
Accept-Encoding: gzip, deflate
14+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
15+
Connection: close
16+

‎testcases/2d/32/2d32929f28f5e026ebf88f00b10318ce.white‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
GET /?msg=He%20made%20a%20plan:%20in%20the%20case%20when%20he%20wins%20the%20lottery,%20he%20will%20travel%20around%20the%20world.%20then,%20he%20can%20finally%20fulfill%20his%20dream. HTTP/1.1
2+
Host: mygame.5054399.com
3+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
4+
Sec-Ch-Ua-Mobile: ?0
5+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
6+
Sec-Ch-Ua-Platform: "Windows"
7+
Accept: */*
8+
Sec-Fetch-Site: cross-site
9+
Sec-Fetch-Mode: no-cors
10+
Sec-Fetch-Dest: script
11+
Referer: https://my.4399.com/yxpkt/
12+
Accept-Encoding: gzip, deflate
13+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
14+
If-None-Match: "58574ffd-f"
15+
If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
16+
Connection: close
17+

‎testcases/2d/32/8807aa6c94559c411aab53979adaf5a8.white‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
GET /?msg=In%20the%20case%20when%20the%20battery%20runs%20out,%20the%20laptop%20will%20automatically%20shut%20down.%20then,%20you%27ll%20need%20to%20recharge%20it%20to%20use%20it%20again. HTTP/1.1
2+
Host: mygame.5054399.com
3+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
4+
Sec-Ch-Ua-Mobile: ?0
5+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
6+
Sec-Ch-Ua-Platform: "Windows"
7+
Accept: */*
8+
Sec-Fetch-Site: cross-site
9+
Sec-Fetch-Mode: no-cors
10+
Sec-Fetch-Dest: script
11+
Referer: https://my.4399.com/yxpkt/
12+
Accept-Encoding: gzip, deflate
13+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
14+
If-None-Match: "58574ffd-f"
15+
If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
16+
Connection: close
17+

‎testcases/2d/32/d81bef68377edb19334c4f4fa79fbcd2.white‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
GET /The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
2+
Host: mygame.5054399.com
3+
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
4+
Sec-Ch-Ua-Mobile: ?0
5+
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
6+
Sec-Ch-Ua-Platform: "Windows"
7+
Accept: */*
8+
Sec-Fetch-Site: cross-site
9+
Sec-Fetch-Mode: no-cors
10+
Sec-Fetch-Dest: script
11+
Referer: https://my.4399.com/yxpkt/
12+
Accept-Encoding: gzip, deflate
13+
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
14+
If-None-Match: "58574ffd-f"
15+
If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
16+
Connection: close
17+

0 commit comments

Comments
 (0)