Where can I find an exhaustive list of web attack strings [closed]

As it currentl开发者_C百科y stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance. Closed 11 years ago.

I'm looking for exhaustive list(s) of web attack strings, which includes as many possible injection strings as possible, including SQLis , XSS, XPATH injections, SSIs, etc. Preferably encoded in various formats. Anyone knows where to find these?

---

The FuzzDB seems to be the answer http://code.google.com/p/fuzzdb/

---

Open Source Vulnerability Database