hackvertor: "Shazzer now uses full browser versions! I've also hidden old…"

Deserializing...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Entities after protocol-relative URL
Characters that act as question mark in anchors
Characters that act as hash in anchors
Characters that act as slashes in anchors
URL hash alternatives
URL question mark alternatives
URL slash alternatives
Unicode "Latin" characters using \p{scx=Latin} RegEx
Characters ignored after colon in URL constructor
Characters ignored after hostname in URL constructor
Characters ignored in hostname before port in URL constructor
Characters allowed after the void operator
Characters allowed before optional chaining
Characters that can precede the javascript protocol copy
masato - braves parsing finding valid characters
Closing title tag name separators
Characters ignored following slash in self closing tag
dsqd
Electron XSS TEST
Characters allowed in between @import

New collections

Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

Characters that act as question mark in anchors
Characters that act as hash in anchors
Characters that act as slashes in anchors
URL hash alternatives
URL question mark alternatives
URL slash alternatives
Characters ignored after colon in URL constructor
Characters ignored after hostname in URL constructor
Characters ignored in hostname before port in URL constructor
Characters that are treated as spaces

Most Popular

URL domain dot alternatives(7.4k)
Characters allowed javascript and colon(7.2k)
JavaScript Scheme starting with https://(6.9k)
Characters allowed between hostname and / but don't change the hostname(6k)
Characters between < and element name(5.8k)
HTML entities that create ASCII characters inside a JavaScript URL(5.7k)
Characters that can precede the javascript protocol(5.7k)
DOM element relationships(5.7k)
characters allowed between exclamation mark and greater then (5.1k)
Characters allowed javascript and colon copy2(5.1k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

hackvertor 1mo ago

Shazzer now uses full browser versions! I've also hidden older browsers by default, this helps when the vector has a lot of historical results

hackvertor: "Shazzer now uses full browser versions! I've also hidden old…"