Bruno Mendes

@s3np41k1r1t0

Leaking...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

relative & protocol relative url starting with a slash and not immediately having a slash after it.
Entities in-between protocol-relative URL
Entities after protocol-relative URL
Entities before protocol-relative URL
Characters matching URLPattern capture group
Valid space characters in a regex
Characters allowed inside javascript protocol and still returns the hostname
Characters allowed before event handler
Characters before custom tag
Injection in src attribute PORT, characters that change hostname
Characters between element name and >
JavaScript separators between function names
Characters allowed after parentheses
Characters allowed before parentheses
Characters that act like new line or single line comment
Characters after strings
HTML comment before greater than
Characters that act as quotes or whitespace
Characters that can break out of a single line comment
framers event executors

Characters matching URLPattern capture group
Entities after protocol-relative URL
Entities in-between protocol-relative URL
Entities before protocol-relative URL
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Characters allowed before event handler
Characters allowed in between start of HTML tag name and event handler
Characters Supported in </script> Tags
Characters allowed in middle of HTML tag name
Characters allowed as start of HTML tag name

URL domain dot alternatives(7.1k)
Characters allowed javascript and colon(6.9k)
JavaScript Scheme starting with https://(6.7k)
Characters allowed between hostname and / but don't change the hostname(5.8k)
Characters between < and element name(5.7k)
Characters that can precede the javascript protocol(5.5k)
DOM element relationships(5.5k)
HTML entities that create ASCII characters inside a JavaScript URL(5.4k)
characters allowed between exclamation mark and greater then (5k)
Characters allowed javascript and colon copy2(4.9k)

disconnected

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Error!

@s3np41k1r1t0