- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Smuggling...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Valid space characters in a regex
Characters allowed inside javascript protocol and still returns the hostname
Entities before protocol-relative URL
Characters matching URLPattern capture group
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Entities in-between protocol-relative URL
Entities after protocol-relative URL
Characters allowed before event handler
Characters before custom tag
Injection in src attribute PORT, characters that change hostname
Characters between element name and >
JavaScript separators between function names
Characters allowed after parentheses
Characters allowed before parentheses
Characters that act like new line or single line comment
Characters after strings
HTML comment before greater than
Characters that act as quotes or whitespace
Characters that can break out of a single line comment
framers event executors

New collections

Entities in protocol relative URLs

New Vectors

Characters matching URLPattern capture group
Entities after protocol-relative URL
Entities in-between protocol-relative URL
Entities before protocol-relative URL
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Characters allowed before event handler
Characters allowed in between start of HTML tag name and event handler
Characters Supported in </script> Tags
Characters allowed in middle of HTML tag name
Characters allowed as start of HTML tag name

Most Popular

URL domain dot alternatives(7.1k)
Characters allowed javascript and colon(6.9k)
JavaScript Scheme starting with https://(6.7k)
Characters allowed between hostname and / but don't change the hostname(5.8k)
Characters between < and element name(5.7k)
Characters that can precede the javascript protocol(5.5k)
DOM element relationships(5.5k)
HTML entities that create ASCII characters inside a JavaScript URL(5.4k)
characters allowed between exclamation mark and greater then (5k)
Characters allowed javascript and colon copy2(4.9k)

Most Liked

URL domain dot alternatives(5)
Entities that cause an external URL before @(4)
Characters allowed between hostname and / but don't change the hostname(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between multiple HTML attributes(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Characters that can precede the javascript protocol(4)
Characters allowed inside javascript protocol and still returns the hostname(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Shazzer

Shared online fuzzer

You are not logged in. To create vectors you need to login. You can browse the various public vectors.

Browse vectors Login