[eur0pa]

I appreciate the effort, however that list of payloads is a great way to get your IP address banned by Akamai and others. There are better ways to discover injection points without poking trigger-happy WAFs.

[JosephRedfern]

I don't think OP is suggesting that the payload list is the interesting thing here, rather the overall approach