developer’s protection schemes or work within the constraints of unusual algorithms.
1) The canonical manipulation for the vulnerability type, such as <SCRIPT> for
XSS, or “%s” for format string vulnerabilities.
2) Equivalence manipulations of the canonical manipulation, e.g. “%2e%2e” as an