- Home
- Vectors
- Stats
- Network
- Tools
  - Cheat sheet
  - Unicode table
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Stats
- Network
- Tools
  - Cheat sheet
  - Unicode table
- Blog
  - Blog home
  - RSS
- Help

Normalizing...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Tags that support HTML comments
CSS random function
CSS hex escapes that cause an external request in-between forward slashes
CSS container queries
masato - braves parsing finding valid attributes
Url parsing diff b/w anchor.href and new URL
Bytes that will normalize ISO-2022-JP
Bytes that will scramble ISO-2022-JP
domain values
Bypass __proto__ string match defense
Characters appended at the end of PORT within URL, which yield a different HOST
masato - braves parsing finding valid characters
masato - braves parsing finding
masato - braves parsing finding entity test
Character allowed after onerror event
URL domain dot alternatives
HTML tags that can clobber the credentials part of the URL
DOM element relationships
Entities that cause an external URL before @
Characters allowed between variable name and equals sign

New collections

CSS the bomb inside your inbox
Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

CSS random function
Before URL protocol relative characters
Characters before CSS property values
Characters in-between CSS property names
Test chars in js protocol
URL fuzzing SVG before href attribute
URL fuzzing attributes
character between url and ( for import
HTML tagName differences
HTML tag localName differences

Most Popular

URL domain dot alternatives(8.2k)
Characters allowed javascript and colon(7.5k)
JavaScript Scheme starting with https://(7.2k)
Characters allowed between hostname and / but don't change the hostname(6.2k)
Characters between < and element name(6.2k)
HTML entities that create ASCII characters inside a JavaScript URL(6.1k)
DOM element relationships(6k)
Characters that can precede the javascript protocol(5.9k)
characters allowed between exclamation mark and greater then (5.5k)
Characters allowed javascript and colon copy2(5.3k)

Most Liked

URL domain dot alternatives(5)
Entities that cause an external URL before @(4)
Characters allowed between hostname and / but don't change the hostname(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between multiple HTML attributes(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Characters that can precede the javascript protocol(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Browser stats

Performance Features Differences Releases

Features supported

Safari supports the most — 4 of 4

Browser-exclusive features

Supported by exactly one browser

Safari(1)

CSS random function

CSS random function

CSS Parsing

Checks if the browser supports CSS random functions.

Chrome✗

Firefox✗

Safari✓

Microsoft Edge✗

CSS container queries

CSS Parsing

Detects support for CSS container queries via the container-type property.

Chrome✓

Firefox✓

Safari✓

Microsoft Edge✓

CSS :is() selector

CSS Parsing

Detects support for the CSS :is() matches-any pseudo-class.

Chrome✓

Firefox✓

Safari✓

Microsoft Edge✓

CSS :has() selector

CSS Parsing

Detects support for the CSS :has() relational pseudo-class.

Chrome✓

Firefox✓

Safari✓

Microsoft Edge✓