- Home
- Login
- Vectors
- Help
- Home
- Login
- Vectors
- Help

K4r1it0

K4r1it0's profile

You are not following. Is not following you.

Followers: 1

Following: 0

Vectors 0

Vector name	User	Created

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

New users

xplo1t-sec Wang-Dao-Ji-MAX SharokhAtaie tehryanx ioasdjiojqiwojaosncasoidjqoiwjeon Lopseg darjoo t0xodile slicingmelon realansgar flexsss2 ehhthing MartinCrespo Auxirie shotgundebugging msrkp joseungwoo Merl1ng weili-praetorian DaveLak

Popular users

hackvertor (20)joaxcar (3)renniepak (3)albinowax (2)JorianWoltjer (2)d0ge (1)freddyb (1)ThomasOrlita (1)DreyAnd (1)K4r1it0 (1)securaji (1)InsertScript (1)koto (1)B-i-t-K (1)weizman (1)avlidienbrunn (1)0x999-x (1)bahazc (0)Osb0rn3 (0)rcbarnett (0)

New vectors

Characters allowed between multiple HTML attributes URL domain dot alternatives Bypass __proto__ string match defense Bypasses for __proto__ string match Characters allowed in path traversal Characters allowed before event in attribute name using setAttribute Characters that can work as attribute seperator HTML tags that force HTML mode inside SVG Entities that convert to greater than in a iframe srcdoc Entities that convert to less than in a iframe srcdoc Mutated XSS with img onerror Characters that can start an HTML comment Fuzzing weird script behaviour after script text Tags that cause child tags not to be found in the DOM Characters allowed to end a JS string Tags that remove the span or are self closing Tags that HTML encode it's contents JavaScript Scheme starting with http React DOM src Characters allowed before CSS selectors

Most popular

URL domain dot alternatives (244)DOM element relationships (224)Characters that can precede the javascript protocol (153)characters allowed between exclamation mark and greater then (126)Characters allowed between hostname and / but don't change the hostname (125)Character that closes HTML tag (115)Characters allowed javascript and colon (110)All properties on navigator (two levels of nesting deep) (103)characters after slash that make a http protocol (92)Characters that can start an HTML comment (91)Characters allowed between HTML attributes (81)HTML tags that force HTML mode inside SVG (80)Character allowed after onerror event (80)JavaScript Scheme starting with https:// (78)HTML entities that create ASCII characters inside a JavaScript URL (76)Characters allowed after hostname but don't change the hostname (65)Characters allowed before javascript URL (59)JavaScript separators between function names (59)Consuming tags (56)List of HTML elements that convert to arbitrary string (55)

Most liked

Characters allowed between hostname and / but don't change the hostname (4)URL domain dot alternatives (3)JavaScript Scheme starting with https:// (3)Characters allowed in-between operators (2)HTML entities that create ASCII characters inside a JavaScript URL (2)Characters allowed after hostname but don't change the hostname (2)Properties that contain URLs (2)HTML elements that are self closing or different text content (2)HTML elements that parse differently when rendered (1)Characters that can break out of an inline style background-image url (1)ToUpperCase Improper Character Morphing (1)JavaScript Scheme starting with http (1)Characters allowed javascript and colon (1)Characters between < and element name (1)Characters that can be used as valid labels in JavaScript (1)Characters allowed after optional chaining (1)Characters allowed within a hostname but don't change the hostname (1)Consuming tags (1)Characters that can precede the javascript protocol (1)All events on window (1)