
Big List of Naughty Strings
Big List of Naughty Strings collects unusual input strings that may trigger issues in software handling user data.

About Big List of Naughty Strings
The Big List of Naughty Strings is an evolving list of strings which have a high probability of causing issues when used as user-input data. It is intended for automated and manual QA testing to help reveal string-validation issues. Use is intended for software you own and manage. It is not a fully-comprehensive substitute for formal security testing.
Pricing is not clearly stated.
Key features
- Newline-delimited blns.txt with # comments dividing strings into sections for manual reading and copy-pasting
- blns.json array with comments stripped for programmatic access, generated by a Python script in the scripts folder
Big List of Naughty Strings at a glance
- Category
- Development › Developer Tools
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Details verified
- Oct 22, 2026 · Official source
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Developer Tools
Big List of Naughty Strings alternatives
Tools and sites you could use instead, ranked by how closely they match.
A python library for doing approximate and phonetic matching of strings.
Gito uses language models to review GitHub code for high impact issues such as vulnerabilities, bugs, and maintainability concerns.
This repository collects n8n workflows gathered from the service and other sources.
AWS Data Wrangler connects Pandas with AWS data services and databases, including Athena, Glue, Redshift, and S3.
Polars provides a Rust query engine for DataFrames, with a Python interface for data work.
TextCL provides preprocessing tools for cleaning text data used in natural language processing tasks.
Popular in Developer Tools
Well-known listings from the same topic.
Tell us and an editor will check it.
Claim the listing and suggest updates yourself. An editor checks every claim first.













