- Home
- Vectors
- Stats
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Stats
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Oracling...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Characters that cause an external URL before @
Injection in src attribute PORT, characters that change hostname
indexOf vs includes
startsWith performance
CSS :has() selector
Attributes that are also DOM properties
startsWith vs regex
Characters allowed in between @import
Characters ignored following slash in self closing tag
Chars allowed before style attribute...
Electron XSS TEST
Characters allowed before after onerror events
chars before img tags
Characters after https URI scheme which prevent URL parsing of href
Characters allowed while closing script tag
test
Characters allowed begin from a forward slash character in javascript protocol
URL scheme separator alternatives
Characters that cause the backslash to be consumed with GBK charset
Characters allowed before host name that are ignored

New collections

Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

indexOf vs includes
startsWith performance
startsWith vs regex
CSS :has() selector
for loop vs forEach
Characters ignored in pathname using a URL constructor
Characters ignored after param value in URL constructor
Characters ignored before param name in URL constructor
Characters before @ in a URL constructor host
Characters that represent "e" in URL constructor host

Most Popular

URL domain dot alternatives(7.5k)
Characters allowed javascript and colon(7.3k)
JavaScript Scheme starting with https://(6.9k)
Characters allowed between hostname and / but don't change the hostname(6k)
Characters between < and element name(5.9k)
HTML entities that create ASCII characters inside a JavaScript URL(5.8k)
DOM element relationships(5.8k)
Characters that can precede the javascript protocol(5.7k)
characters allowed between exclamation mark and greater then (5.2k)
Characters allowed javascript and colon copy2(5.1k)

Most Liked

URL domain dot alternatives(5)
Entities that cause an external URL before @(4)
Characters allowed between hostname and / but don't change the hostname(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between multiple HTML attributes(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Characters that can precede the javascript protocol(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Browser stats

Performance Features Differences

Features supported

Chrome supports the most — 1 of 1

Browser-exclusive features

Supported by exactly one browser

No exclusive features — every tested feature is supported by more than one browser (or none).

CSS :has() selector

CSS Parsing

Detects support for the CSS :has() relational pseudo-class.

Chrome✓

Firefox✓

Safari✓