- Home
- Blog
  - Blog home
  - RSS
- Login
- Vectors
- Unicode table
- Help
- Home
- Blog
  - Blog home
  - RSS
- Login
- Vectors
- Unicode table
- Help

Shazzer blog

No posts found.

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor

New users

alexander47777 3357987 0xEval kozmic Logider Tholithemb alexb1268 qkfkqkfk110 lontano-sec lyhtheori junan1234 rlaaudrb1104 In3xplicable Ykxx999 KTsarevich 0xBl4nk ashbi-sec RemakingEden emin-skrijelj tharavel

Popular users

hackvertor (32)renniepak (7)joaxcar (5)albinowax (4)masatokinugawa (3)d0ge (2)JorianWoltjer (2)0x999-x (2)freddyb (1)hansmach1ne (1)ThomasOrlita (1)DreyAnd (1)sqjor (1)securaji (1)InsertScript (1)B-i-t-K (1)koto (1)vitorfhc (1)K4r1it0 (1)weizman (1)

Recently updated vectors

Window properties Tags that get reordered in the DOM Tags that get moved out of parent Tags that support HTML comments Tags that DO NOT support HTML comments Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost Chars allowed between src and = in img tag Characters allowed before the JavaScript protocol colon Escape inline double quote Characters that starts element name CSS inline property definition

New vectors

CSS inline property definition Characters that starts element name Escape inline double quote Characters allowed before the JavaScript protocol colon Chars allowed between src and = in img tag Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost Url parsing diff b/w window.open and new URL Characters ending XML Processing Instructions (WIP)Tags that DO NOT support HTML comments Tags that support HTML comments zwzzzwzwwzwzwwxzwz Tags that get moved out of parent Characters that can be inside the javascript protocol Tags that get reordered in the DOM Malformed HTML comments Characters allowed before the JavaScript protocol Entities allowed before slashes which result in an external URL Characters allowed before slashes which result in an external URL Characters allowed after slashes which result in an external URL Characters allowed after colon which result in an external URL

Most popular

URL domain dot alternatives (3417)DOM element relationships (3254)Characters between < and element name (3231)Characters allowed between hostname and / but don't change the hostname (3221)JavaScript Scheme starting with https:// (3134)Characters that can precede the javascript protocol (2995)Characters allowed javascript and colon copy2 (2827)< removal bypass (2594)Characters allowed javascript and colon (2590)characters allowed between exclamation mark and greater then (2443)Characters that close or encapsulate HTML attribute values (2362)Entities that cause an external URL before @ (2201)Character that closes HTML tag (2161)Includes Validation Chars Allowed (2062)HTML entities that create ASCII characters inside a JavaScript URL (2057)XSS vectors that consume tag (1923)Characters allowed after hostname but don't change the hostname (1798)All properties on navigator (two levels of nesting deep) (1740)Characters allowed between multiple HTML attributes (1703)Characters that can precede the javascript protocol copy2 (1595)

Most liked

URL domain dot alternatives (5)Characters allowed between hostname and / but don't change the hostname (4)Entities that cause an external URL before @ (4)HTML entities that create ASCII characters inside a JavaScript URL (4)JavaScript Scheme starting with https:// (4)Characters that cause an external URL before @ (3)Characters allowed javascript and colon (3)Characters that can precede the javascript protocol (3)Characters allowed between multiple HTML attributes (2)Characters that can start an HTML comment (2)Unicode characters that get normalized into path traversal characters (2)HTML elements that are self closing or different text content (2)Characters allowed in-between operators (2)Characters that can be used as valid labels in JavaScript (2)Characters allowed after optional chaining (2)Characters that cause exceptions when URL encoded (2)Characters appended at the end of TLD within URL, which yield in the same Origin (2)Characters allowed after hostname but don't change the hostname (2)Properties that contain URLs (2)All events on window (1)