Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Characters ignored after param value in URL constructor
Characters before @ in a URL constructor host
Characters ignored in pathname using a URL constructor
Characters that close or encapsulate HTML attribute values
Character that closes HTML tag
Characters that starts element name
Includes Validation Chars Allowed
XSS vectors that consume tag
Escape inline double quote
Characters allowed between multiple HTML attributes
Characters to break out from eval string
Characters ending XML Processing Instructions (WIP)
Characters allowed javascript and colon
< removal bypass
Characters appended at the end of TLD within URL, which yield in the same Origin
All properties on navigator (two levels of nesting deep)
Characters that can start an HTML comment
Characters allowed after hostname but don't change the hostname
Characters allowed before the JavaScript protocol colon
Character allowed after onerror event

URL domain dot alternatives(7.5k)
Characters allowed javascript and colon(7.3k)
JavaScript Scheme starting with https://(6.9k)
Characters allowed between hostname and / but don't change the hostname(6k)
Characters between < and element name(5.9k)
HTML entities that create ASCII characters inside a JavaScript URL(5.8k)
DOM element relationships(5.7k)
Characters that can precede the javascript protocol(5.7k)
characters allowed between exclamation mark and greater then (5.2k)
Characters allowed javascript and colon copy2(5.1k)

URL domain dot alternatives(5)
Entities that cause an external URL before @(4)
Characters allowed between hostname and / but don't change the hostname(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between multiple HTML attributes(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Characters that can precede the javascript protocol(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)