How to use Unicode torture
- 1. Pick a case. Empty, Zalgo, RTL, and more.
- 2. Copy the string. Paste into your app under test.
- 3. Or copy the blob. All cases concatenated.
- 4. Not an attack pack for production. Educational fixtures.
About this tool
Inputs fail on Zalgo, RTL overrides, ZWJ families, homoglyph domains, BOMs, and 5k-character lines. This catalog copies those strings so QA does not have to hunt them down.
Homoglyph
Cyrillic lookalikes — use Unicode Inspector to see codepoints.
XSS / SQLi
Not this list. Keep those in an internal suite if you need them.
Code examples
ZWJ
👨👩👧👦