Shazzer logo
    • Home
    • Blog
      • Blog home
      • RSS
    • Login
    • Vectors
      • New vector
      • All Vectors
      • Cheat sheets
      • Browser diffs
      • RSS
    • Unicode table
    • Help
    • Home
    • Blog
      • Blog home
      • RSS
    • Login
    • Vectors
      • New vector
      • All Vectors
      • Cheat sheets
      • Browser diffs
      • RSS
    • Unicode table
    • Help
    Shazzer logo

    Shazzer
    Shared online fuzzer

    Fuzzing browsers since 2012

    Made by Gareth Heyes
    Follow me on Twitter: @garethheyes

    Javascript for hackers!

    Hackvertor logo
    The Spanner logo

    If you liked this, you may also like Hackvertor, The Spanner

    New users
    sebunyaTrusthoodiesCrunchy000hyojin-214ctztyUzunDzhonokileakimmPolar-TangSquareMetaFrontH3NGO1UalecmalyPatrick0x41spipms3np41k1r1t0goblovMoopingerkacpal-stmSteakEnthusiastminhbao15677
    Popular users
    hackvertor (34)renniepak (7)albinowax (5)joaxcar (5)0x999-x (4)masatokinugawa (3)d0ge (2)JorianWoltjer (2)DreyAnd (1)B-i-t-K (1)hansmach1ne (1)securaji (1)koto (1)ThomasOrlita (1)weizman (1)jonathann403 (1)InsertScript (1)K4r1it0 (1)sqjor (1)freddyb (1)
    Recently updated vectors
    Characters allowed javascript and colonCharacters that change length on .toLowerCase()Characters that are valid JS variablesURL domain dot alternatives< removal bypassBytes that will scramble ISO-2022-JPTags that get reordered in the DOMEscape inline double quoteCharacters allowed before host name that are ignoredCharacters allowed as a tag name using DOM APIsCharacters appended at the end of PORT within URL, which yield a different HOSTInjection in src attribute PORT, characters that change hostnameCharacters that can be inside the javascript protocol caopyasdas
    New vectors
    Characters before custom tagCharacters that can be inside the javascript protocol caopyasdasInjection in src attribute PORT, characters that change hostnameCharacters appended at the end of PORT within URL, which yield a different HOSTCharacters allowed as a tag name using DOM APIsCharacters allowed before host name that are ignoredUrl parsing diff b/w anchor.href and new URLScheme slash alternatives in URL() when a base is usedtest_protocolCharacters that end unencapsulated HTML attribute valuesUnicode characters with a decomposition of 2+ ASCII characters and are registerable domainsURL scheme separator alternatives copyhCharacters allowed in the protocol that still resolve host nameChars that can be used as opening bracket in innerHTMLFuzzing for Max sanitized input (simplified)test-idCSS inline property definitionCharacters that starts element nameEscape inline double quoteCharacters allowed before the JavaScript protocol colon
    Most popular
    URL domain dot alternatives (4.1k)DOM element relationships (3.9k)Characters allowed between hostname and / but don't change the hostname (3.9k)Characters between < and element name (3.8k)JavaScript Scheme starting with https:// (3.7k)Characters that can precede the javascript protocol (3.6k)Characters allowed javascript and colon copy2 (3.3k)Characters allowed javascript and colon (3.1k)< removal bypass (3.1k)characters allowed between exclamation mark and greater then (2.9k)Characters that close or encapsulate HTML attribute values (2.8k)Entities that cause an external URL before @ (2.7k)HTML entities that create ASCII characters inside a JavaScript URL (2.6k)Character that closes HTML tag (2.5k)Includes Validation Chars Allowed (2.4k)XSS vectors that consume tag (2.3k)Characters allowed between multiple HTML attributes (2.1k)Characters allowed after hostname but don't change the hostname (2.1k)Tags that get reordered in the DOM (2.1k)All properties on navigator (two levels of nesting deep) (2k)
    Most liked
    URL domain dot alternatives (5)JavaScript Scheme starting with https:// (4)Entities that cause an external URL before @ (4)Characters allowed between hostname and / but don't change the hostname (4)HTML entities that create ASCII characters inside a JavaScript URL (4)Characters that can precede the javascript protocol (3)Characters that cause an external URL before @ (3)Characters allowed javascript and colon (3)Characters allowed after optional chaining (2)HTML elements that are self closing or different text content (2)Characters allowed in-between operators (2)Unicode characters that get normalized into path traversal characters (2)Characters allowed between multiple HTML attributes (2)Characters that can be used as valid labels in JavaScript (2)Characters allowed after hostname but don't change the hostname (2)Characters that can start an HTML comment (2)Characters appended at the end of TLD within URL, which yield in the same Origin (2)Characters that cause exceptions when URL encoded (2)Properties that contain URLs (2)Consuming tags (1)
    hackvertor

    hackvertor's profile

    You are not following. Is not following you.

    Github profile

    Followers: 34

    Ykxx999RemakingEdenVagebondcurHackerAndyaThaFWordcanalunola456mainajackson95smauryAman369-hunterjekyll-001valent1neeDiaaDiabriyuzaki16abdilahrfIieitaimusAmrit-prasadjonathann403tnk13hahwulteknogeekYouGinarootd4ddyJaveleyQAQskabdulhaqhansmach1neThomasOrlitaajxchapmancold-tryaristosMiliaressisrenniepakOsb0rn30x999-xSudistark

    Following: 22

    N25secreindaelmanCillian-Collinssimoneonofrimasatokinugawaola456jonathann403kotoalbinowaxd0gefreddybhansmach1neB-i-t-KThomasOrlitaDreyAndJorianWoltjerweizmanavlidienbrunnjoaxcarrenniepak0x999-xInsertScript

    Vectors 98

    Vector nameUser Created Type Likes
    Firefox logo 961
    Safari logo 961
    Chrome logo 992
    Characters that cause the backslash to be consumed with a big5 charsethackvertor11/1/2024XSS0
    Firefox logo 8
    Safari logo 8
    Chrome logo 8
    Differences between escape vs encodeURIComponenthackvertor10/15/2024JS1
    Entities in-between square brackets that close cdatahackvertor10/8/2024XSS1
    Chrome logo 1
    Firefox logo 1
    Safari logo 1
    Characters in-between square brackets that close cdatahackvertor10/8/2024XSS0
    Chrome logo 2048
    Safari logo 2048
    Firefox logo 2048
    Characters that cause exceptions when URL encodedhackvertor10/3/2024JS2
    Chrome logo 4
    Firefox logo 4
    Safari logo 4
    Entities that cause an external URL before @hackvertor9/25/2024XSS4
    Firefox logo 4
    Safari logo 4
    Chrome logo 4
    Characters that cause an external URL before @hackvertor9/25/2024JS3
    Chrome logo 89
    Firefox logo 89
    Safari logo 89
    Characters unencoded characters supported in the hashhackvertor9/24/2024JS1
    Chrome logo 70
    Firefox logo 71
    Safari logo 71
    Characters urlencoded that get transformed when using the credentials part of the URLhackvertor9/24/2024JS0
    Chrome logo 1
    Firefox logo 1
    Safari logo 1
    Characters allowed before event in attribute name using setAttributehackvertor8/21/2024JS0
    Safari logo 39
    Chrome logo 39
    Firefox logo 1
    HTML tags that force HTML mode inside SVGhackvertor8/2/2024XSS1
    Safari logo 3
    Chrome logo 3
    Firefox logo 3
    Entities that convert to greater than in a iframe srcdochackvertor8/1/2024XSS0
    Chrome logo 3
    Firefox logo 3
    Safari logo 3
    Entities that convert to less than in a iframe srcdochackvertor8/1/2024XSS0
    Chrome logo 7
    Firefox logo 7
    Fuzzing weird script behaviour after script texthackvertor7/18/2024XSS0
    Chrome logo 11
    Firefox logo 11
    Safari logo 11
    Tags that cause child tags not to be found in the DOMhackvertor7/18/2024HTML0
    Chrome logo 17
    Safari logo 17
    Firefox logo 17
    Tags that remove the span or are self closinghackvertor7/16/2024XSS0
    Chrome logo 2
    Firefox logo 2
    Safari logo 2
    Tags that HTML encode it's contentshackvertor7/16/2024XSS0
    Chrome logo 5
    Safari logo 5
    Characters allowed before CSS selectorshackvertor7/15/2024XSS0
    Chrome logo 10
    Firefox logo 10
    Safari logo 10
    Entities that are normalized for ehackvertor7/12/2024JS0
    Safari logo 9
    Entities allowed inside hosthackvertor7/6/2024JS0

    Found 98 records

    Page 2 of 5

    «
    12345
    »