- Home
- Blog
  - Blog home
  - RSS
- Login
- Vectors
- Unicode table
- Help
- Home
- Blog
  - Blog home
  - RSS
- Login
- Vectors
- Unicode table
- Help

s3np41k1r1t0

s3np41k1r1t0's profile

You are not following. Is not following you.

Followers: 0

Following: 0

Vectors 0

	Vector name	User	Created	Type	Likes

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor, The Spanner

New users

s3np41k1r1t0 goblov Moopinger kacpal-stm SteakEnthusiast minhbao15677 LTiDi2000 Macabely N25sec llopommop tamerkrz2023 meeranh meme-lord junan-98 winterisland0710 6b6f6c6a61 DanielSchmerber qySec mrvcoder colfax0483

Popular users

hackvertor (34)renniepak (7)albinowax (5)joaxcar (5)0x999-x (4)masatokinugawa (3)d0ge (2)JorianWoltjer (2)DreyAnd (1)B-i-t-K (1)hansmach1ne (1)securaji (1)koto (1)ThomasOrlita (1)weizman (1)jonathann403 (1)InsertScript (1)K4r1it0 (1)sqjor (1)freddyb (1)

Recently updated vectors

Consuming tags HTML elements that are self closing or different text content HTML tags that can clobber the credentials part of the URL Characters that cause the backslash to be consumed with GBK charset URL scheme separator alternatives Unicode characters that get normalized into path traversal characters Characters appended at the end of TLD within URL, which yield in the same host property Characters prepended to URL, which yield in the same host property Entities allowed before slashes which result in an external URL Tags that DO NOT support HTML comments CSS inline property definition Fuzzing for Max sanitized input (simplified)Characters allowed in the protocol that still resolve host name Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains Scheme slash alternatives in URL() when a base is used

New vectors

Url parsing diff b/w anchor.href and new URL Scheme slash alternatives in URL() when a base is used test_protocol Characters that end unencapsulated HTML attribute values Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains URL scheme separator alternatives copyh Characters allowed in the protocol that still resolve host name Chars that can be used as opening bracket in innerHTML Fuzzing for Max sanitized input (simplified)test-id CSS inline property definition Characters that starts element name Escape inline double quote Characters allowed before the JavaScript protocol colon Chars allowed between src and = in img tag Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost Url parsing diff b/w window.open and new URL Characters ending XML Processing Instructions (WIP)Tags that DO NOT support HTML comments Tags that support HTML comments

Most popular

URL domain dot alternatives (4k)DOM element relationships (3.8k)Characters allowed between hostname and / but don't change the hostname (3.8k)Characters between < and element name (3.8k)JavaScript Scheme starting with https:// (3.7k)Characters that can precede the javascript protocol (3.5k)Characters allowed javascript and colon copy2 (3.3k)< removal bypass (3k)Characters allowed javascript and colon (3k)characters allowed between exclamation mark and greater then (2.8k)Characters that close or encapsulate HTML attribute values (2.7k)Entities that cause an external URL before @ (2.6k)HTML entities that create ASCII characters inside a JavaScript URL (2.5k)Character that closes HTML tag (2.4k)Includes Validation Chars Allowed (2.3k)XSS vectors that consume tag (2.2k)Characters allowed between multiple HTML attributes (2.1k)Characters allowed after hostname but don't change the hostname (2.1k)All properties on navigator (two levels of nesting deep) (1.9k)Characters that cause an external URL before @ (1.8k)

Most liked

URL domain dot alternatives (5)JavaScript Scheme starting with https:// (4)Entities that cause an external URL before @ (4)Characters allowed between hostname and / but don't change the hostname (4)HTML entities that create ASCII characters inside a JavaScript URL (4)Characters that can precede the javascript protocol (3)Characters that cause an external URL before @ (3)Characters allowed javascript and colon (3)Characters allowed after optional chaining (2)HTML elements that are self closing or different text content (2)Characters allowed in-between operators (2)Unicode characters that get normalized into path traversal characters (2)Characters allowed between multiple HTML attributes (2)Characters that can be used as valid labels in JavaScript (2)Characters allowed after hostname but don't change the hostname (2)Characters that can start an HTML comment (2)Characters appended at the end of TLD within URL, which yield in the same Origin (2)Characters that cause exceptions when URL encoded (2)Properties that contain URLs (2)Consuming tags (1)