Featured vector

Safari 0.0
<!-- sample vector --> <img src=xx:xx onerror0x0d=alert(1)>

Fuzz vector cloud

3,344,404 Successful fuzzes

Fuzz Database

Diff Browser Major Version Minor Version
Exclude alphanum Doctype DocMode Charset
Vector
Characters that will be mutated to a correct URI 3
Navigation - Found 10 record(s). Page 1 of 1
Browsers
Opera12.16 Win7 Win32 utf-8 html5 edge
Chrome28.0 Win7 Win64 GB2312 html5 edge
Chrome28.0 Win7 Win64 ISO-8859-1 html5 edge
Chrome28.0 Win7 Win64 utf-8 html5 edge
Chrome28.0 Win7 Win64 Shift-JIS html5 edge
Test case View test case
Char "
Name QUOTATION MARK
Charcode 34
Hex 0x22
Vector <script> function report34(num){ var lol = document.getElementById('lol34'); if(/uk\//.test(lol.src)){ logChr(34); } } </script> <iframe id="lol34" src="http://shazzer.co.uk"break" onload=report34(34)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Opera12.16 Win7 Win32 utf-8 html5 edge
Chrome28.0 Win7 Win64 GB2312 html5 edge
Chrome28.0 Win7 Win64 ISO-8859-1 html5 edge
Chrome28.0 Win7 Win64 utf-8 html5 edge
Chrome28.0 Win7 Win64 Shift-JIS html5 edge
Test case View test case
Char #
Name NUMBER SIGN = pound sign, hash, crosshatch, octothorpe
Charcode 35
Hex 0x23
Vector <script> function report35(num){ var lol = document.getElementById('lol35'); if(/uk\//.test(lol.src)){ logChr(35); } } </script> <iframe id="lol35" src="http://shazzer.co.uk#break" onload=report35(35)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Opera12.16 Win7 Win32 utf-8 html5 edge
Firefox23.0 Win7 Win64 utf-8 html5 edge
Chrome28.0 Win7 Win64 GB2312 html5 edge
Chrome28.0 Win7 Win64 ISO-8859-1 html5 edge
Chrome28.0 Win7 Win64 utf-8 html5 edge
Chrome28.0 Win7 Win64 Shift-JIS html5 edge
Test case View test case
Char /
Name SOLIDUS = slash, virgule
Charcode 47
Hex 0x2f
Vector <script> function report47(num){ var lol = document.getElementById('lol47'); if(/uk\//.test(lol.src)){ logChr(47); } } </script> <iframe id="lol47" src="http://shazzer.co.uk/break" onload=report47(47)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Opera12.16 Win7 Win32 utf-8 html5 edge
Test case View test case
Char ;
Name SEMICOLON
Charcode 59
Hex 0x3b
Vector <script> function report59(num){ var lol = document.getElementById('lol59'); if(/uk\//.test(lol.src)){ logChr(59); } } </script> <iframe id="lol59" src="http://shazzer.co.uk;break" onload=report59(59)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Opera12.16 Win7 Win32 utf-8 html5 edge
Chrome28.0 Win7 Win64 GB2312 html5 edge
Chrome28.0 Win7 Win64 ISO-8859-1 html5 edge
Chrome28.0 Win7 Win64 utf-8 html5 edge
Chrome28.0 Win7 Win64 Shift-JIS html5 edge
Test case View test case
Char ?
Name QUESTION MARK
Charcode 63
Hex 0x3f
Vector <script> function report63(num){ var lol = document.getElementById('lol63'); if(/uk\//.test(lol.src)){ logChr(63); } } </script> <iframe id="lol63" src="http://shazzer.co.uk?break" onload=report63(63)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Chrome28.0 Win7 Win64 GB2312 html5 edge
Chrome28.0 Win7 Win64 ISO-8859-1 html5 edge
Chrome28.0 Win7 Win64 utf-8 html5 edge
Chrome28.0 Win7 Win64 Shift-JIS html5 edge
Test case View test case
Char \
Name REVERSE SOLIDUS = backslash
Charcode 92
Hex 0x5c
Vector <script> function report92(num){ var lol = document.getElementById('lol92'); if(/uk\//.test(lol.src)){ logChr(92); } } </script> <iframe id="lol92" src="http://shazzer.co.uk\break" onload=report92(92)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Safari5.1 iOS Unknown utf-8 html5 edge
Test case View test case
Char
Name DOUBLE QUESTION MARK
Charcode 8263
Hex 0x2047
Vector <script> function report8263(num){ var lol = document.getElementById('lol8263'); if(/uk\//.test(lol.src)){ logChr(8263); } } </script> <iframe id="lol8263" src="http://shazzer.co.uk⁇break" onload=report8263(8263)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Safari5.1 iOS Unknown utf-8 html5 edge
Test case View test case
Char
Name QUESTION EXCLAMATION MARK
Charcode 8264
Hex 0x2048
Vector <script> function report8264(num){ var lol = document.getElementById('lol8264'); if(/uk\//.test(lol.src)){ logChr(8264); } } </script> <iframe id="lol8264" src="http://shazzer.co.uk⁈break" onload=report8264(8264)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Chrome28.0 Win7 Win64 ISO-8859-1 html5 edge
Test case View test case
Char
Name
Charcode 20008
Hex 0x4e28
Vector <script> function report20008(num){ var lol = document.getElementById('lol20008'); if(/uk\//.test(lol.src)){ logChr(20008); } } </script> <iframe id="lol20008" src="http://shazzer.co.uk丨break" onload=report20008(20008)> <p>The browser does not support iframes.</p> </iframe>
Browsers
Chrome28.0 Win7 Win64 ISO-8859-1 html5 edge
Test case View test case
Char
Name
Charcode 24104
Hex 0x5e28
Vector <script> function report24104(num){ var lol = document.getElementById('lol24104'); if(/uk\//.test(lol.src)){ logChr(24104); } } </script> <iframe id="lol24104" src="http://shazzer.co.uk帨break" onload=report24104(24104)> <p>The browser does not support iframes.</p> </iframe>
Navigation - Found 10 record(s). Page 1 of 1