- Home
- Vectors
  - Categories
  - All vectors
  - All collections
  - Browser diffs
  - RSS
- Stats
- Network
- Tools
  - Cheat sheet
  - Unicode table
- Blog
  - Blog home
  - RSS
- What's new
- Help

Prodding...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Bypass __proto__ string match defense
URL fuzzing SVG before href attribute
Tags that consume markup but select consumes them
Characters before @ in a URL constructor host
Characters ignored before param name in URL constructor
Characters ignored after param value in URL constructor
Characters ignored in pathname using a URL constructor
for loop vs forEach
CSS :has() selector
startsWith vs regex
startsWith performance
indexOf vs includes
CSS :is() selector
CSS container queries
String concat vs array join
Supported HTML and attributes by the Sanitizer
HTML tag localName differences
HTML tagName differences
CSS random function
Attribute separators

New collections

Fetch with protocol relative URLs
CSS the bomb inside your inbox
Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

Tags that consume markup but select consumes them
Characters after protocol relative slashes in fetch()
Characters in-between protocol relative URLs in fetch()
Characters before protocol relative URLs in fetch()
Script tag closing characters
Attribute separators
CSS random function
Before URL protocol relative characters
Characters before CSS property values
Characters in-between CSS property names

Most Popular

URL domain dot alternatives(9.2k)
Characters allowed javascript and colon(7.9k)
JavaScript Scheme starting with https://(7.4k)
Characters between < and element name(6.8k)
Characters allowed between hostname and / but don't change the hostname(6.3k)
HTML entities that create ASCII characters inside a JavaScript URL(6.2k)
DOM element relationships(6.2k)
Characters that can precede the javascript protocol(6k)
characters allowed between exclamation mark and greater then (5.8k)
Entities that cause an external URL before @(5.7k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle. The launcher keeps fuzzing going while you use other tabs.

Browser stats

Performance Features Differences Releases

Chrome 152.0.7977.76

1 vector changed

Measured against the version before it on the same platform, OS and charset, across 48 vectors the network tested on this release.

← All releases

Window properties

SINGLEΔ+3

This vector shows all the available window properties in a browser.

Chrome 152.0.7977.65 → 152.0.7977.76 · desktop · macOS 10.15.7 · UTF-8 · 998 → 1,001 code points

+3 gained−0 lost