Where can I find an exhaustive list of web attack strings [closed]

Question

I'm looking for exhaustive list(s) of web attack strings, which includes as many possible injection strings as possible, including SQLis , XSS, XPATH injections, SSIs, etc. Preferably encoded in various formats. Anyone knows where to find these?

Answer 1

The FuzzDB seems to be the answer http://code.google.com/p/fuzzdb/

Answer 2

Open Source Vulnerability Database