- Home
- Login
- Vectors
- Help
- Home
- Login
- Vectors
- Help

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

New users

shotgundebugging msrkp joseungwoo Merl1ng weili-praetorian DaveLak xoismael AlfinJ0se Hashtag-AMIN Q0120S hvanarkel niah2209 Couskito arshkhakh gitYli natstheway BY-musi vitorfhc heyguysrubikd pdstat

Popular users

hackvertor (18)renniepak (3)joaxcar (3)albinowax (2)freddyb (1)koto (1)B-i-t-K (1)securaji (1)d0ge (1)ThomasOrlita (1)InsertScript (1)K4r1it0 (1)weizman (1)avlidienbrunn (1)DreyAnd (1)0x999-x (1)bahazc (0)Osb0rn3 (0)rcbarnett (0)myuyu (0)

New vectors

Bypass __proto__ string match defense Bypasses for __proto__ string match test1 test document properties copy test Characters allowed in path traversal copy Characters allowed in path traversal Characters allowed before event in attribute name using setAttribute Characters that can work as attribute seperator HTML tags that force HTML mode inside SVG Entities that convert to greater than in a iframe srcdoc Entities that convert to less than in a iframe srcdoc Mutated XSS with img onerror asd Characters that can start an HTML comment Fuzzing weird script behaviour after script text Tags that cause child tags not to be found in the DOM Characters allowed to end a JS string Tags that remove the span or are self closing

Most popular

DOM element relationships (224)Characters allowed javascript and colon copy (126)characters allowed between exclamation mark and greater then (125)Characters allowed between hostname and / but don't change the hostname (124)Characters that can precede the javascript protocol (120)Character that closes HTML tag (113)Characters allowed javascript and colon (107)All properties on navigator (two levels of nesting deep) (103)characters after slash that make a http protocol (92)Characters allowed between HTML attributes (80)Character allowed after onerror event (80)HTML tags that force HTML mode inside SVG (77)Characters allowed before onerror events (76)HTML entities that create ASCII characters inside a JavaScript URL (76)JavaScript Scheme starting with https:// (75)Characters that can precede the javascript protocol copy (72)Characters that can start an HTML comment (70)Characters allowed after hostname but don't change the hostname (65)Characters allowed before javascript URL (59)JavaScript separators between function names (59)

Most liked

Characters allowed between hostname and / but don't change the hostname (4)JavaScript Scheme starting with https:// (3)HTML elements that are self closing or different text content (2)HTML entities that create ASCII characters inside a JavaScript URL (2)Characters allowed after hostname but don't change the hostname (2)Characters allowed in-between operators (2)Properties that contain URLs (2)Characters that act as new lines in multi line strings (1)Characters that can break out of an inline style background-image url (1)ToUpperCase Improper Character Morphing (1)Characters allowed javascript and colon (1)Characters between < and element name (1)Characters allowed within a hostname but don't change the hostname (1)HTML elements that parse differently when rendered (1)Characters that can be used as valid labels in JavaScript (1)Characters allowed after optional chaining (1)Characters allowed before onerror events (1)Consuming tags (1)Characters that can precede the javascript protocol (1)All events on window (1)

joaxcar

joaxcar's profile

You are not following. Is not following you.

Followers: 3

Following: 0

Vectors 3

Vector name	User	Created
Characters allowed in path traversal	joaxcar	8/26/2024
List of HTML elements that convert to arbitrary string	joaxcar	4/10/2024
DOM element relationships	joaxcar	4/10/2024