- Home
- Login
- Vectors
- Unicode table
- Help
- Home
- Login
- Vectors
- Unicode table
- Help

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor

New users

Nokline saumya-7 ACK-J seifallahhomrani1 Believe-AS benjamin-mauss n0ggi3 CarsterX alokazay gaur4sh ChillAndImprove unmd1 nicosayer AmirmohammadZarif A81602 alertdefender Seumas-tobraichean Scar3cr0vv a-mohammadhosseini serialfuzzer

Popular users

hackvertor (28)renniepak (6)joaxcar (5)masatokinugawa (3)albinowax (3)JorianWoltjer (2)0x999-x (2)d0ge (1)freddyb (1)ThomasOrlita (1)DreyAnd (1)K4r1it0 (1)securaji (1)InsertScript (1)koto (1)B-i-t-K (1)sqjor (1)ola456 (1)vitorfhc (1)weizman (1)

New vectors

Characters allowed after equals sign for event Unicode characters that get normalized into path traversal characters ISO-2022-JP ASCII escape sequence Impossible lab frameset Find WAF bypass for eval context Characters transformed when using lowercase Characters transformed when using uppercase Chars in href that will not default to full URL Non-standard characters that break JSON.parse()HTML elements that inherit properties which return the full URL URL scheme separator alternatives Characters that can be between < and script>Characters that cause the backslash to be consumed with GBK charset Characters that can precede the javascript protocol copy2 Characters allowed javascript and colon copy2 copy2 Characters that close or encapsulate HTML attribute values XSS vectors that consume tag HTML tags and attributes that can be used to access the URL HTML tags that can clobber the credentials part of the URL Characters that cause the backslash to be consumed with a big5 charset

Most popular

URL domain dot alternatives (1829)DOM element relationships (1716)Characters between < and element name (1697)Characters allowed between hostname and / but don't change the hostname (1672)JavaScript Scheme starting with https:// (1576)Characters that can precede the javascript protocol (1564)Characters allowed javascript and colon copy2 (1513)< removal bypass (1364)characters allowed between exclamation mark and greater then (1295)Characters that close or encapsulate HTML attribute values (1279)Characters allowed javascript and colon (1272)Character that closes HTML tag (1183)Includes Validation Chars Allowed (1150)All properties on navigator (two levels of nesting deep) (1105)Characters allowed after hostname but don't change the hostname (1084)XSS vectors that consume tag (1082)Entities that cause an external URL before @ (1042)Characters that can precede the javascript protocol copy2 (1025)Characters allowed javascript and colon copy2 copy2 (989)HTML entities that create ASCII characters inside a JavaScript URL (983)

Most liked

URL domain dot alternatives (4)Entities that cause an external URL before @ (4)JavaScript Scheme starting with https:// (4)Characters allowed between hostname and / but don't change the hostname (4)Characters that cause an external URL before @ (2)Characters that cause exceptions when URL encoded (2)Characters allowed between multiple HTML attributes (2)HTML entities that create ASCII characters inside a JavaScript URL (2)Characters allowed javascript and colon (2)Characters allowed in-between operators (2)Characters that can start an HTML comment (2)HTML elements that are self closing or different text content (2)XSS vectors that consume tag (2)Characters allowed after hostname but don't change the hostname (2)Characters that can precede the javascript protocol (2)Properties that contain URLs (2)All events on window (1)Characters allowed at IPv6 but don't change the hostname (1)Characters allowed at hostname (1)Characters that change length on .toLowerCase() (1)

m10x

m10x's profile

You are not following. Is not following you.

Followers: 0

Following: 0

Vectors 1

	Vector name	User	Created	Type	Likes
1	Characters that can be between < and script>	m10x	11/12/2024	HTML	0