- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Clickjacking...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Characters cause self closing tag
characters between function name and parentheses
Characters matching RegEx /\w/ui
Characters allowed in between // in absolute URL
Characters allowed as start of HTML tag name
Unicode "Latin" characters using \p{scx=Latin} RegEx
Properties are accessible in a sandboxed iframe
Properties that leak the parent URL even when sandboxed
Characters allowed in middle of HTML tag name
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Characters Supported in </script> Tags
Characters allowed in between start of HTML tag name and event handler
Valid space characters in a regex
Entities before protocol-relative URL
Characters allowed before event handler
Entities after protocol-relative URL
Entities in-between protocol-relative URL
Characters matching URLPattern capture group
JIS X 0208 bytes that produce ASCII characters
Characters allowed inside javascript protocol and still returns the hostname

New collections

Entities in protocol relative URLs

New Vectors

Characters matching URLPattern capture group
Entities after protocol-relative URL
Entities in-between protocol-relative URL
Entities before protocol-relative URL
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Characters allowed before event handler
Characters allowed in between start of HTML tag name and event handler
Characters Supported in </script> Tags
Characters allowed in middle of HTML tag name
Characters allowed as start of HTML tag name

Most Popular

URL domain dot alternatives(7.2k)
Characters allowed javascript and colon(7k)
JavaScript Scheme starting with https://(6.7k)
Characters allowed between hostname and / but don't change the hostname(5.8k)
Characters between < and element name(5.7k)
Characters that can precede the javascript protocol(5.5k)
DOM element relationships(5.5k)
HTML entities that create ASCII characters inside a JavaScript URL(5.5k)
characters allowed between exclamation mark and greater then (5k)
Characters allowed javascript and colon copy2(4.9k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters allowed inside javascript protocol and still returns the hostname(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

albinowax

Error!

James Kettle

@albinowax

0 Following 5 Followers

Posts Replies Likes Vectors

hackvertor

JavaScript for hackers: Learn to think like a hacker.

Device1306

j0sh99

jekyll-001

ola456