- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Spoofing...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Characters allowed after parentheses
Characters between element name and >
JavaScript separators between function names
Characters that act like new line or single line comment
Characters allowed before parentheses
Characters after strings
Characters that act as quotes or whitespace
HTML comment before greater than
Characters that can break out of a single line comment
framers event executors
Characters that can be inserted in the middle of the JS protocol name
Characters allowed between an object and the dot operator
Characters that change length on .toLowerCase()
Break out of CSS strings
Characters allowed in-between hyphens
Characters allowed as a class separator
Characters allowed within a hostname but don't change the hostname
Characters that change length on .toUpperCase()
Characters that separate CSS properties
characters after slash that make a http protocol

New collections

Entities in protocol relative URLs

New Vectors

Characters that are treated as spaces
Characters that are valid JS part variables
mamad
Decimal separators in parseFloat
String trim whitepace characters
Characters matching URLPattern capture group
Entities after protocol-relative URL
Entities in-between protocol-relative URL
Entities before protocol-relative URL
relative & protocol relative url starting with a slash and not immediately having a slash after it.

Most Popular

URL domain dot alternatives(7.4k)
Characters allowed javascript and colon(7.2k)
JavaScript Scheme starting with https://(6.9k)
Characters allowed between hostname and / but don't change the hostname(6k)
Characters between < and element name(5.8k)
HTML entities that create ASCII characters inside a JavaScript URL(5.7k)
Characters that can precede the javascript protocol(5.7k)
DOM element relationships(5.7k)
characters allowed between exclamation mark and greater then (5.1k)
Characters allowed javascript and colon copy2(5.1k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Shazzer Elite

hackvertor

Fuzzing...

Error!

Gareth Heyes

@hackvertor

JavaScript for hackers: Learn to think like a hacker.

garethheyes.co.uk/#latestBook

109 Vectors 26 Following 45 Followers

Posts Replies Likes Vectors

hackvertor 1mo ago

Shazzer now uses full browser versions! I've also hidden older browsers by default, this helps when the vector has a lot of historical results