Big List of Naughty Strings (BLNS)

The project provides two primary file formats for consuming the strings:

1. blns.txt: A newline-delimited text file. It includes comments preceded by # to divide strings into sections, making it ideal for manual reading and copy-pasting into UI input forms.
2. blns.json: A JSON file containing an array of all strings. This version has all comments stripped out, making it suitable for programmatic access in automated testing suites.

While the core repository contains the raw data files, several community-maintained libraries are available for programmatic integration in different languages:

The Base64Encoded() function returns a slice of strings where each naughty string from the list has been base64 encoded. This is useful for testing systems that decode input before processing it.

package main

import (
	"fmt"
	"github.com/minimaxir/big-list-of-naughty-strings/naughtystrings"
)

func main() {
	encodedStrings := naughtystrings.Base64Encoded()
	for _, s := range encodedStrings {
		fmt.Println(s)
	}
}

The Unencoded() function returns a slice of strings containing the raw 'naughty strings' from the list. These strings are intended to be used as test input to identify potential vulnerabilities or edge cases in user input handling.

package main

import (
	"fmt"
	"github.com/minimaxir/big-list-of-naughty-strings/naughtystrings"
)

func main() {
	naughtyStrings := naughtystrings.Unencoded()
	for _, s := range naughtyStrings {
		fmt.Println(s)
	}
}