- Home
- Login
- Vectors
- Unicode table
- Help
- Home
- Login
- Vectors
- Unicode table
- Help

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor

New users

nyxsorcerer nsysean Zaemond RabihDigital sahafreza ii5mai1 hipotermia Bo0oM JinHwan-Park0428 familiardisaster nestor753 erickfernandox Pouriash21 core1mpact dan-xzero pilvar222 ShahidKalwani p4tl bugraesk lp-static

Popular users

hackvertor (30)renniepak (7)joaxcar (5)albinowax (4)masatokinugawa (3)d0ge (2)JorianWoltjer (2)0x999-x (2)freddyb (1)hansmach1ne (1)ThomasOrlita (1)DreyAnd (1)sqjor (1)securaji (1)InsertScript (1)B-i-t-K (1)koto (1)vitorfhc (1)K4r1it0 (1)weizman (1)

New vectors

Tags that DO NOT support HTML comments Tags that support HTML comments zwzzzwzwwzwzwwxzwz xddd Tags that get moved out of parent Characters that can be inside the javascript protocol Tags that get reordered in the DOM Malformed HTML comments Characters allowed before the JavaScript protocol Entities allowed before slashes which result in an external URL Characters allowed before slashes which result in an external URL Characters allowed after slashes which result in an external URL Characters allowed after colon which result in an external URL Entities allowed between slashes using XSS type Characters allowed between slashes using XSS type Characters prepended to URL host. check if difference between URL and a tag Characters prepended to URL, which yield in the same host property Characters appended at the end of TLD within URL, which yield in the same host property Allowed characters right after tag name & before tag closure, no other characters in between Loose comparison, characters appended which still result in type coercion

Most popular

URL domain dot alternatives (2598)DOM element relationships (2447)Characters between < and element name (2427)Characters allowed between hostname and / but don't change the hostname (2415)JavaScript Scheme starting with https:// (2324)Characters that can precede the javascript protocol (2247)Characters allowed javascript and colon copy2 (2128)< removal bypass (1941)Characters allowed javascript and colon (1900)characters allowed between exclamation mark and greater then (1838)Characters that close or encapsulate HTML attribute values (1789)Character that closes HTML tag (1658)Includes Validation Chars Allowed (1604)Entities that cause an external URL before @ (1587)XSS vectors that consume tag (1539)HTML entities that create ASCII characters inside a JavaScript URL (1483)Characters allowed after hostname but don't change the hostname (1450)All properties on navigator (two levels of nesting deep) (1417)Characters that can precede the javascript protocol copy2 (1297)Characters that cause exceptions when URL encoded (1267)

Most liked

URL domain dot alternatives (5)JavaScript Scheme starting with https:// (4)Characters allowed between hostname and / but don't change the hostname (4)Entities that cause an external URL before @ (4)Characters allowed javascript and colon (3)HTML entities that create ASCII characters inside a JavaScript URL (3)Characters that can precede the javascript protocol (3)Characters that cause an external URL before @ (2)Characters allowed between multiple HTML attributes (2)Characters that can start an HTML comment (2)Unicode characters that get normalized into path traversal characters (2)HTML elements that are self closing or different text content (2)Characters allowed in-between operators (2)Characters that can be used as valid labels in JavaScript (2)Characters allowed after optional chaining (2)Characters that cause exceptions when URL encoded (2)Characters appended at the end of TLD within URL, which yield in the same Origin (2)Characters allowed after hostname but don't change the hostname (2)Properties that contain URLs (2)All events on window (1)

BinaryScary

BinaryScary's profile

You are not following. Is not following you.

Followers: 0

Following: 0

Vectors 2

	Vector name	User	Created	Type	Likes
	JavaScript Scheme starting with http	BinaryScary	7/16/2024	JS	1
	JavaScript Scheme starting with https://	BinaryScary	6/28/2024	JS	4