- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Tainting...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Entities before protocol-relative URL
Characters matching URLPattern capture group
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Entities in-between protocol-relative URL
Entities after protocol-relative URL
Characters allowed before event handler
Characters before custom tag
Injection in src attribute PORT, characters that change hostname
Characters between element name and >
JavaScript separators between function names
Characters allowed after parentheses
Characters allowed before parentheses
Characters that act like new line or single line comment
Characters after strings
HTML comment before greater than
Characters that act as quotes or whitespace
Characters that can break out of a single line comment
framers event executors
Characters that can be inserted in the middle of the JS protocol name
Characters that change length on .toLowerCase()

New collections

Entities in protocol relative URLs

New Vectors

Characters matching URLPattern capture group
Entities after protocol-relative URL
Entities in-between protocol-relative URL
Entities before protocol-relative URL
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Characters allowed before event handler
Characters allowed in between start of HTML tag name and event handler
Characters Supported in </script> Tags
Characters allowed in middle of HTML tag name
Characters allowed as start of HTML tag name

Most Popular

URL domain dot alternatives(7.1k)
Characters allowed javascript and colon(6.9k)
JavaScript Scheme starting with https://(6.7k)
Characters allowed between hostname and / but don't change the hostname(5.8k)
Characters between < and element name(5.7k)
Characters that can precede the javascript protocol(5.5k)
DOM element relationships(5.4k)
HTML entities that create ASCII characters inside a JavaScript URL(5.4k)
characters allowed between exclamation mark and greater then (5k)
Characters allowed javascript and colon copy2(4.9k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters allowed inside javascript protocol and still returns the hostname(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

JorianWoltjer

Error!

Jorian

@JorianWoltjer

3 Following 9 Followers

Posts Replies Likes Vectors

hackvertor

JavaScript for hackers: Learn to think like a hacker.

0x999-x

electro0nes

sibivasanM

Fabertvarico

ZeyadZonkorany

xorraxrax1

moza369

piprett