- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Havocing...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Entities after protocol-relative URL
Characters Supported in </script> Tags
Decimal separators in parseFloat
Characters allowed while closing script tag
Characters matching URLPattern capture group
String trim whitepace characters
Characters allowed before after onerror events
Chars allowed before style attribute...
chars before img tags
Characters after https URI scheme which prevent URL parsing of href
Entities before protocol-relative URL
characters between function name and parentheses
Characters allowed in between // in absolute URL
Characters matching RegEx /\w/ui
Unicode "Latin" characters using \p{scx=Latin} RegEx
Properties are accessible in a sandboxed iframe
Properties that leak the parent URL even when sandboxed
Characters allowed as start of HTML tag name
Characters allowed in middle of HTML tag name
Characters cause self closing tag

New collections

Entities in protocol relative URLs

New Vectors

Decimal separators in parseFloat
String trim whitepace characters
Characters matching URLPattern capture group
Entities after protocol-relative URL
Entities in-between protocol-relative URL
Entities before protocol-relative URL
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Characters allowed before event handler
Characters allowed in between start of HTML tag name and event handler
Characters Supported in </script> Tags

Most Popular

URL domain dot alternatives(7.3k)
Characters allowed javascript and colon(7.1k)
JavaScript Scheme starting with https://(6.8k)
Characters allowed between hostname and / but don't change the hostname(5.9k)
Characters between < and element name(5.8k)
Characters that can precede the javascript protocol(5.6k)
HTML entities that create ASCII characters inside a JavaScript URL(5.6k)
DOM element relationships(5.6k)
characters allowed between exclamation mark and greater then (5.1k)
Characters allowed javascript and colon copy2(5k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

joaxcar

Error!

Johan Carlsson

@joaxcar

0 Following 5 Followers

Posts Replies Likes Vectors

hackvertor

JavaScript for hackers: Learn to think like a hacker.

0x999-x

renniepak

C15C01337

mainajackson95