Featured vector

IE 9.0
<script>alert(1,1</script0x10059/)</script>

Fuzz vector cloud

Anchor Attributes CSS Closing Comments HTM HTML JavaScript New Script TTM XSS attribute close colon data datauri elements escaping event events expression handler html4 inline innerHTML lines obfuscation padding properties quote regex regexp self selfxss separation space spaces string strings style svg syntax tag tags trim uri vbs vbscript xml

907,629 Successful fuzzes

Shazzer

User information

Username Points
@garethheyes 126
Vectors created
Array variables
Attribute separators
Characters allowed after asterix in CSS comments
Characters allowed after attribute name
Characters allowed after colon in url
Characters allowed after colon in url (no slashes)
Characters allowed after paren rule
Characters allowed after script
Characters allowed after slash in url
Characters allowed as gt in url
Characters allowed as h in http
Characters allowed as lt in url
Characters allowed as s in url
Characters allowed as slash in url
Characters allowed as _ in url
Characters allowed before a JavaScript function
Characters allowed before attribute name
Characters allowed before colon in js url
Characters allowed before CSS properties
Characters allowed before paren
Characters allowed before protocol in js url
Characters allowed between slashes
Characters before img
Characters before paren in Javascript call
Characters before rgb
Characters before script
Characters between rgb
Characters in between protocol in js url
Characters separating attributes without quotes
Characters separating attributes without quotes after hash
Characters that are new lines
Characters that are spaces
Characters that break out of script variables
Characters that close a HTML comment
Characters that close JS Comments
Characters that trigger a new attr after new line
Document body variables
Document variables
Does this browser support e4x
Events in tags with src or href that execute javascript
Function variables
Hex characters allowed after asterix in CSS comments
Iframe contentDocument properties
Iframe contentWindow properties
NULL Characters inside JavaScript properties
Number variables
Object variables
Opening paren expression check
Quoteless attributes breaker
Regexp variables
String variables
Tags and events that execute javascript
Tags and events that execute javascript 2
Tags that execute onerror
Valid characters after expression
Valid characters after expression 2
Valid characters after expression 3
Valid characters after expression 4
Window variables