Featured vector

Firefox 0.0
<img src0x3dx onerror0x3dalert(1)>

Fuzz vector cloud

3,386,006 Successful fuzzes

Fuzz Database

Vector Created By
Single characters that break attribute names @garethheyes
kkkkkkkkk @D_Szameitat
Characters that break out of css urls latest @garethheyes
o replacement in event handlers @blubbfiction
img tag overflow @kinmenhacker
Connect back @kinmenhacker
Characters allowed before script tag name @tifkin_
allowed char in js comment @insertScript
Entities allowed with no semi colon @garethheyes
Characters allowed instead of colon in js url @garethheyes
Entities allowed instead of colon for js protocol @peksa
Eating backslash @garethheyes
Characters allowed after asterix in CSS comments @garethheyes
Iframe contentWindow properties @garethheyes
Characters breaking JavaScript Regex delimiter @0x6D6172696F
Characters allowed after attribute name @garethheyes
Characters allowed before attribute name @garethheyes