Characters allowed javascript and colon
Vector to check if any characters are allowed between javascript and : to still result in a javascript url.
Created by: renniepak
Created on: 4/9/2024, 5:52:50 PM
Updated on: 5/18/2024, 8:46:24 PM
Vector type: JS
Template used:
if (new URL("javascript$[chr]:alert()").protocol=="javascript:"){log($[i])}
Your browser was detected as:
Detecting... Detecting...
Fuzz results:
Chrome 123.0.0.0
Results
Found 3
Dec | Hex | Chr |
---|---|---|
9 | 09 | HT |
Dec | Hex | Chr |
---|---|---|
58 | 3a | : |
Dec | Hex | Chr |
---|---|---|
92 | 5c | \ |
Safari 17.2.1
Results
Found 3
Dec | Hex | Chr |
---|---|---|
9 | 09 | HT |
Dec | Hex | Chr |
---|---|---|
58 | 3a | : |
Dec | Hex | Chr |
---|---|---|
92 | 5c | \ |