- Home
- Blog
  - Blog home
  - RSS
- Login
- Vectors
- Unicode table
- Help
- Home
- Blog
  - Blog home
  - RSS
- Login
- Vectors
- Unicode table
- Help

Browser differences

Vector name	Differences
Loading...	Loading...
Loading...	Loading...
Loading...	Loading...
Loading...	Loading...

Found 224 records

Page 12 of 12

3 4 5 6 7 8 9 10 11 12

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor, The Spanner

New users

bribes sibivasanM masternovato RenwaX23 huynambka 1nhann MathisFranel forglockenspielexact BigColaXD mpaujan21 Th3k33n efpi-bot caueobici brenocss Y3RmKHgp sebunya Trusthoodies Crunchy000 hyojin-214 ctzty

Popular users

hackvertor (35)renniepak (8)joaxcar (5)albinowax (5)JorianWoltjer (4)0x999-x (4)masatokinugawa (3)d0ge (2)RenwaX23 (2)freddyb (1)hansmach1ne (1)ThomasOrlita (1)DreyAnd (1)B-i-t-K (1)koto (1)jonathann403 (1)securaji (1)InsertScript (1)K4r1it0 (1)sqjor (1)

Recently updated vectors

Characters allowed javascript and colon Characters allowed instead of equal sign Characters allowed javascript and colon copy2 Characters appended at the end of TLD within URL, which yield in the same Origin Characters allowed as a tag name using DOM APIs Injection in src attribute PORT, characters that change hostname Characters allowed inside javascript protocol and still returns the hostname Characters ignored following slash in self closing tag Characters cause self closing tag Named HTML entities that can be closed with !

New vectors

Named HTML entities that can be closed with !Characters cause self closing tag Characters ignored following slash in self closing tag Characters allowed inside javascript protocol and still returns the hostname Characters allowed after a bigint Characters allowed either side of a variable assignment Characters allowed after throw statement encodeURI() not encoded with %Characters encoded by escape()Characters encoded by encodeURI()Characters encoded by encodeURIComponent()Characters before custom tag Injection in src attribute PORT, characters that change hostname Characters appended at the end of PORT within URL, which yield a different HOST Characters allowed as a tag name using DOM APIs Characters allowed before host name that are ignored Url parsing diff b/w anchor.href and new URL Scheme slash alternatives in URL() when a base is used Characters that end unencapsulated HTML attribute values Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains

Most popular

URL domain dot alternatives (5.1k)Characters between < and element name (4.4k)DOM element relationships (4.2k)Characters allowed between hostname and / but don't change the hostname (4.2k)Characters that can precede the javascript protocol (4.1k)JavaScript Scheme starting with https:// (4.1k)Characters allowed javascript and colon (4.1k)Characters allowed javascript and colon copy2 (3.9k)< removal bypass (3.7k)characters allowed between exclamation mark and greater then (3.5k)HTML entities that create ASCII characters inside a JavaScript URL (3.2k)Characters that close or encapsulate HTML attribute values (3k)Entities that cause an external URL before @ (2.9k)Character that closes HTML tag (2.7k)Characters allowed between multiple HTML attributes (2.7k)Includes Validation Chars Allowed (2.6k)XSS vectors that consume tag (2.5k)Characters that cause exceptions when URL encoded (2.4k)Characters allowed after hostname but don't change the hostname (2.3k)Tags that get reordered in the DOM (2.3k)

Most liked

URL domain dot alternatives (5)Entities that cause an external URL before @ (4)HTML entities that create ASCII characters inside a JavaScript URL (4)JavaScript Scheme starting with https:// (4)Characters allowed between hostname and / but don't change the hostname (4)Characters that cause an external URL before @ (3)Characters allowed javascript and colon (3)Characters that can precede the javascript protocol (3)Characters allowed after hostname but don't change the hostname (2)Characters that cause exceptions when URL encoded (2)Characters allowed between multiple HTML attributes (2)Properties that contain URLs (2)Unicode characters that get normalized into path traversal characters (2)Characters that can start an HTML comment (2)HTML elements that are self closing or different text content (2)Characters appended at the end of TLD within URL, which yield in the same Origin (2)Characters allowed in-between operators (2)Characters that can be used as valid labels in JavaScript (2)Characters allowed after optional chaining (2)All events on window (1)