- Home
- Login
- Vectors
- Help
- Home
- Login
- Vectors
- Help

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor

New users

joseph-tawfik-ws Sjuuls OverflowMyBuffers yuebusao ola456 nguyenthdat whyshsc shriyanss kaung1337 reket991 reket99 rocknoob mainajackson95 virgilcj mil1200 redbankdev iPowerTheOne smaury muradx0 guusec

Popular users

hackvertor (25)joaxcar (5)renniepak (4)albinowax (2)JorianWoltjer (2)0x999-x (2)d0ge (1)freddyb (1)ThomasOrlita (1)DreyAnd (1)K4r1it0 (1)securaji (1)InsertScript (1)koto (1)B-i-t-K (1)sqjor (1)ola456 (1)vitorfhc (1)weizman (1)avlidienbrunn (1)

New vectors

Characters that close or encapsulate HTML attribute values XSS vectors that consume tag HTML tags and attributes that can be used to access the URL HTML tags that can clobber the credentials part of the URL Characters that cause the backslash to be consumed with a big5 charset Differences between escape vs encodeURIComponent < removal bypass Entities in-between square brackets that close cdata Characters in-between square brackets that close cdata Includes Validation Chars Allowed Characters that cause exceptions when URL encoded Characters allowed javascript and colon copy2 work HTML vector char not urlencoded (data+)domain values char not urlencoded (data)Entities that cause an external URL before @Characters that cause an external URL before @Chars allowed before domain

Most popular

URL domain dot alternatives (662)DOM element relationships (599)Characters between < and element name (583)Characters that can precede the javascript protocol (540)Characters allowed between hostname and / but don't change the hostname (522)Characters allowed javascript and colon copy2 (512)JavaScript Scheme starting with https:// (450)characters allowed between exclamation mark and greater then (435)Character that closes HTML tag (416)Characters allowed javascript and colon (411)< removal bypass (404)All properties on navigator (two levels of nesting deep) (376)Includes Validation Chars Allowed (368)Characters allowed after hostname but don't change the hostname (340)work (330)HTML vector (320)char not urlencoded (data+) (316)Characters that can start an HTML comment (315)characters after slash that make a http protocol (312)char not urlencoded (data) (301)

Most liked

Characters allowed between hostname and / but don't change the hostname (4)JavaScript Scheme starting with https:// (4)URL domain dot alternatives (4)Entities that cause an external URL before @ (3)HTML entities that create ASCII characters inside a JavaScript URL (2)Characters allowed in-between operators (2)Characters that cause exceptions when URL encoded (2)HTML elements that are self closing or different text content (2)Characters allowed javascript and colon (2)Characters allowed after hostname but don't change the hostname (2)Characters that cause an external URL before @ (2)Properties that contain URLs (2)Characters that can precede the javascript protocol (2)HTML elements that parse differently when rendered (1)Entities allowed as JS variables (1)Characters that can break out of an inline style background-image url (1)ToUpperCase Improper Character Morphing (1)Characters between < and element name (1)Characters that can be used as valid labels in JavaScript (1)Characters allowed after optional chaining (1)

Y4tacker

Y4tacker's profile

You are not following. Is not following you.

Followers: 0

Following: 0

Vectors 1

	Vector name	User	Created	Type	Likes
9	XSS vectors that consume tag	Y4tacker	11/5/2024	XSS	1