Chromium Code Reviews Chromium Code Reviews
Issue 1897863002:
Add dictionary for HTTP fuzzers. (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@master| OLD | NEW |
|---|---|
| (Empty) | |
| 1 # Copyright 2016 The Chromium Authors. All rights reserved. | |
| 2 # Use of this source code is governed by a BSD-style license that can be | |
| 3 # found in the LICENSE file. | |
| 4 | |
| 5 # Fuzzer dictionary targetting HTTP/1.x responses. | |
| 6 | |
| 7 # Entries that are generally useful in headers | |
| 8 ":" | |
| 9 "\x0A" | |
| 10 "\x0D" | |
| 11 "0" | |
| 12 "50" | |
| 13 "500" | |
| 14 # Horizontal whitespace. Matters mostly in status line. | |
| 15 " " | |
| 16 "\x09" | |
|
eroman
2016/04/18 17:26:24
Does the format support regular C escape sequences
mmenke
2016/04/18 17:36:03
Unfortunately, it does not, except for \" and \\
| |
| 17 # Used in a lot of individual headers | |
| 18 ";" | |
| 19 "=" | |
| 20 "," | |
| 21 "\"" | |
| 22 | |
| 23 # Status line components | |
| 24 "HTTP" | |
| 25 "/1.1" | |
| 26 "/1.0" | |
| 27 # More interesting status codes. Leading space so can be inserted into | |
| 28 # other status lines. | |
| 29 " 100" | |
| 30 " 200" | |
| 31 " 206" | |
| 32 " 301" | |
| 33 " 302" | |
| 34 " 303" | |
| 35 " 304" | |
| 36 " 307" | |
| 37 " 308" | |
| 38 " 401" | |
| 39 " 403" | |
| 40 " 404" | |
| 41 " 500" | |
| 42 " 501" | |
| 43 " 403" | |
| 44 | |
| 45 # Full status lines (Some with relevant following headers) | |
| 46 "HTTP/1.1 200 OK\x0A\x0A" | |
| 47 "HTTP/1.1 100 Continue\x0A\x0A" | |
| 48 "HTTP/1.1 401 Unauthorized\x0AWWW-Authenticate: Basic realm=\"Middle-Earth\"\x0A \xA0" | |
| 49 "HTTP/1.1 407 Proxy Authentication Required\x0AProxy-Authenticate: Digest realm= \"Middle-Earth\", nonce=\"aaaaaaaaaa\"\x0A\x0A" | |
| 50 "HTTP/1.0 301 Moved Permanently\x0ALocation: /a\x0A\x0A" | |
| 51 "HTTP/1.1 302 Found\x0ALocation: http://lost/\x0A\x0A" | |
|
mmenke
2016/04/18 16:35:46
https://bugs.chromium.org/p/chromium/issues/detail
| |
| 52 | |
| 53 # Proxy authentication headers. Note that fuzzers don't support NTLM or | |
| 54 # negotiate. | |
| 55 "WWW-Authenticate" | |
| 56 "Proxy-Authenticate" | |
| 57 "Basic" | |
| 58 "Digest" | |
| 59 "realm" | |
| 60 "nonce" | |
| 61 | |
| 62 "Connection" | |
| 63 "Proxy-Connection" | |
| 64 "Keep-Alive" | |
| 65 "Close" | |
| 66 "\x0AConnection: Keep-Alive" | |
| 67 "\x0AConnection: Close" | |
| 68 "\x0AProxy-Connection: Keep-Alive" | |
| 69 "\x0AProxy-Connection: Close" | |
| 70 | |
| 71 "Content-Length" | |
| 72 "Transfer-Encoding" | |
| 73 "chunked" | |
| 74 "\x0AContent-Length: 0" | |
| 75 "\x0AContent-Length: 500" | |
| 76 "\x0ATransfer-Encoding: chunked\x0A\x0A5\x0A12345\x0A0\x0A\x0A" | |
| OLD | NEW |
