- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Corpus-building...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Characters that represent "e" in URL constructor host
Characters between element name and >
JavaScript separators between function names
Characters allowed after parentheses
Characters allowed before parentheses
Characters that act like new line or single line comment
Characters after strings
HTML comment before greater than
Characters that act as quotes or whitespace
Characters that can break out of a single line comment
framers event executors
Characters that can be inserted in the middle of the JS protocol name
Break out of CSS strings
Characters that change length on .toLowerCase()
Characters that change length on .toUpperCase()
Characters allowed in-between hyphens
Characters allowed as a class separator
Characters allowed within a hostname but don't change the hostname
Characters allowed between an object and the dot operator
characters after slash that make a http protocol

New collections

Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

Characters that represent "e" in URL constructor host
Characters that act as question mark in anchors
Characters that act as hash in anchors
Characters that act as slashes in anchors
URL hash alternatives
URL question mark alternatives
URL slash alternatives
Characters ignored after colon in URL constructor
Characters ignored after hostname in URL constructor
Characters ignored in hostname before port in URL constructor

Most Popular

URL domain dot alternatives(7.4k)
Characters allowed javascript and colon(7.2k)
JavaScript Scheme starting with https://(6.9k)
Characters allowed between hostname and / but don't change the hostname(6k)
Characters between < and element name(5.9k)
HTML entities that create ASCII characters inside a JavaScript URL(5.7k)
DOM element relationships(5.7k)
Characters that can precede the javascript protocol(5.7k)
characters allowed between exclamation mark and greater then (5.2k)
Characters allowed javascript and colon copy2(5.1k)

Most Liked

URL domain dot alternatives(5)
Entities that cause an external URL before @(4)
Characters allowed between hostname and / but don't change the hostname(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between multiple HTML attributes(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Characters that can precede the javascript protocol(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Shazzer Elite

hackvertor

Fuzzing...

Error!

Gareth Heyes

@hackvertor

Web security researcher at PortSwigger. Author of JavaScript for Hackers, Shazzer and Hackvertor.

garethheyes.co.uk/#latestBook

119 Vectors 26 Following 45 Followers

Posts Replies Likes Vectors

Sudistark

0x999-x

Osb0rn3

renniepak

avlidienbrunn

JorianWoltjer

aristosMiliaressis

cold-try

ajxchapman

ThomasOrlita

hansmach1ne

skabdulhaq

JaveleyQAQ

rootd4ddy

YouGina

teknogeek

hahwul

tnk13

jonathann403

Amrit-prasad

Iieitaimus

abdilahrf

riyuzaki16

DiaaDiab

valent1nee

jekyll-001

Aman369-hunter

whoissecure

smaury

mainajackson95

ola456

canalun

ThaFWord

HackerAndya

Vagebondcur

RemakingEden

Ykxx999

itsryuku

Fabertvarico

DrTenma1998

0xlakshan

piprett

CTF.

Arjevan1dze

rahul200218

Danialzarabadi