- Home
- Blog
  - Blog home
  - RSS
- Login
- Vectors
- Unicode table
- Help
- Home
- Blog
  - Blog home
  - RSS
- Login
- Vectors
- Unicode table
- Help

ph4nt0mbyt3

ph4nt0mbyt3's profile

You are not following. Is not following you.

Followers: 0

Following: 0

Vectors 0

	Vector name	User	Created	Type	Likes

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

New users

ehourdebaigt davidbors-snyk ph4nt0mbyt3 DrTenma1998 siunam321 lmaohahaxd bsthreatcom xoxourx RobinDeBaets castilho101 manuelxantony kudrom P4rkJW yass-dev elvar333 ZeyadZonkorany ShanksGGW Fabertvarico sttuartt Lkinneer

Popular users

hackvertor (37)renniepak (8)JorianWoltjer (6)joaxcar (5)albinowax (5)0x999-x (4)RenwaX23 (3)masatokinugawa (3)d0ge (2)hansmach1ne (2)freddyb (1)B-i-t-K (1)ThomasOrlita (1)koto (1)DreyAnd (1)jonathann403 (1)securaji (1)InsertScript (1)K4r1it0 (1)sqjor (1)

Recently updated vectors

Properties that contain URLs Characters allowed in path traversal Entities that cause an external URL before @Unicode characters that get normalized into path traversal characters Bytes that will scramble ISO-2022-JP Loose comparison, characters appended which still result in type coercion Allowed characters right after tag name & before tag closure, no other characters in between Characters allowed between slashes using XSS type Characters cause self closing tag Named HTML entities that can be closed with !Characters allowed before after onerror events chars before img tags Characters after https URI scheme which prevent URL parsing of href Characters allowed while closing script tag

New vectors

Characters allowed begin from a forward slash character in javascript protocol Characters allowed while closing script tag Characters after https URI scheme which prevent URL parsing of href chars before img tags Chars allowed before style attribute...Characters allowed before after onerror events Electron XSS TEST Characters allowed in between @import dsqd Closing title tag name separators masato - braves parsing finding entity test masato - braves parsing finding valid characters masato - braves parsing finding valid attributes masato - braves parsing finding Named HTML entities that can be closed with !Characters cause self closing tag Characters ignored following slash in self closing tag Characters allowed inside javascript protocol and still returns the hostname Characters allowed after a bigint Characters allowed either side of a variable assignment

Most popular

URL domain dot alternatives (5.4k)Characters between < and element name (4.8k)DOM element relationships (4.5k)Characters that can precede the javascript protocol (4.5k)Characters allowed between hostname and / but don't change the hostname (4.5k)Characters allowed javascript and colon (4.4k)JavaScript Scheme starting with https:// (4.4k)Characters allowed javascript and colon copy2 (4.3k)< removal bypass (4k)characters allowed between exclamation mark and greater then (3.8k)HTML entities that create ASCII characters inside a JavaScript URL (3.6k)Characters that close or encapsulate HTML attribute values (3.4k)Entities that cause an external URL before @ (3.3k)Character that closes HTML tag (3.1k)Characters allowed between multiple HTML attributes (3.1k)Characters that cause exceptions when URL encoded (3.1k)XSS vectors that consume tag (3k)Includes Validation Chars Allowed (3k)Characters allowed after hostname but don't change the hostname (2.8k)Tags that get reordered in the DOM (2.8k)

Most liked

URL domain dot alternatives (5)Characters allowed between multiple HTML attributes (4)Characters allowed between hostname and / but don't change the hostname (4)JavaScript Scheme starting with https:// (4)HTML entities that create ASCII characters inside a JavaScript URL (4)Entities that cause an external URL before @ (4)Characters that cause an external URL before @ (3)Characters allowed javascript and colon (3)Characters that can precede the javascript protocol (3)Properties that contain URLs (2)Characters allowed after hostname but don't change the hostname (2)Characters that cause exceptions when URL encoded (2)Unicode characters that get normalized into path traversal characters (2)Characters that can start an HTML comment (2)HTML elements that are self closing or different text content (2)Characters allowed inside javascript protocol and still returns the hostname (2)Characters appended at the end of TLD within URL, which yield in the same Origin (2)Characters allowed in-between operators (2)Characters that can be used as valid labels in JavaScript (2)Characters allowed after optional chaining (2)