- Home
- Vectors
- Stats
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Stats
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Symbolizing...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Unicode "Latin" characters using \p{scx=Latin} RegEx
chars before img tags
Characters after https URI scheme which prevent URL parsing of href
Characters allowed while closing script tag
test
Characters allowed begin from a forward slash character in javascript protocol
characters between function name and parentheses
Characters allowed in between // in absolute URL
Characters matching RegEx /\w/ui
Properties are accessible in a sandboxed iframe
Properties that leak the parent URL even when sandboxed
Characters allowed as start of HTML tag name
Characters between element name and >
JavaScript separators between function names
Characters allowed after parentheses
Characters allowed before parentheses
Characters that act like new line or single line comment
framers event executors
Characters after strings
HTML comment before greater than

New collections

Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

JavaScript URLs allowed by the Sanitizer
Supported HTML and events by the Sanitizer
Supported HTML and attributes by the Sanitizer
String concat vs array join
CSS container queries
CSS :is() selector
indexOf vs includes
startsWith performance
startsWith vs regex
CSS :has() selector

Most Popular

URL domain dot alternatives(7.9k)
Characters allowed javascript and colon(7.4k)
JavaScript Scheme starting with https://(7k)
Characters allowed between hostname and / but don't change the hostname(6.1k)
Characters between < and element name(6k)
HTML entities that create ASCII characters inside a JavaScript URL(5.9k)
DOM element relationships(5.8k)
Characters that can precede the javascript protocol(5.8k)
characters allowed between exclamation mark and greater then (5.2k)
Characters allowed javascript and colon copy2(5.2k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Fuzzer

JorianWoltjer

Fuzzing...

Error!

Jorian

@JorianWoltjer

13 Vectors 5 Following 9 Followers

Posts Replies Likes Vectors

hackvertor

Web security researcher at PortSwigger. Author of JavaScript for Hackers, Shazzer and Hackvertor.

0x999-x

electro0nes

sibivasanM

Fabertvarico

ZeyadZonkorany

xorraxrax1

moza369

piprett

CTF.