Featured vector

Chrome 0.0
<!-- sample vector --> <img src=xx:xx 0x0donerror=alert(1)>

Fuzz vector cloud

3,424,392 Successful fuzzes

Fuzz Vectors

Searching for "Property"

Your browser identified as

General Crawlers unknown

All vectors

Description Vector Created by
doc property hijack with iframe v3 <script> var testpad = document.createElement("iframe"); testpad.name="dummy"; document.body.appendChild(testpad); for(props in document){ testpad.name = props; if (document[props]+"" === "[object Window]") { customLog(props) } } </script> @insertScript
Characters that break out of css urls latest <div id="fuzzelement*num*" style="background:url(about:blank?*chr*;color:#000000;x:);"></div> @garethheyes
Characters allowed between property accessor and property <script> if(document.*chr*body === document.body) { logChr(*num*); } </script> @tifkin_
JS Property check middle character <img src=xx:xx onerror=window[['log*chr*Chr']](*num*)> @garethheyes
JS Property check ending character <img src=xx:xx onerror=window[['logChr*chr*']](*num*)> @garethheyes
NULL Characters inside JavaScript properties `'"><script>window['log*chr*'](*num*)</script> @garethheyes
Characters allowed before CSS properties '"`><div id="fuzzelement*num*" style="*chr*color:#000000;"></div> @garethheyes