- Home
- Login
- Vectors
- Unicode table
- Help
- Home
- Login
- Vectors
- Unicode table
- Help

Unicode table

From-To or characters/entities

Highlights From-To

Loading...

0-127

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor

New users

kacpal SilverPoision lolkhan853 BuckLaFleur najam1997 nonc2 DenEnen Nokline saumya-7 ACK-J seifallahhomrani1 Believe-AS benjamin-mauss n0ggi3 CarsterX alokazay gaur4sh ChillAndImprove unmd1 nicosayer

Popular users

hackvertor (29)renniepak (7)joaxcar (5)masatokinugawa (3)albinowax (3)d0ge (2)JorianWoltjer (2)0x999-x (2)freddyb (1)hansmach1ne (1)ThomasOrlita (1)DreyAnd (1)sqjor (1)securaji (1)InsertScript (1)B-i-t-K (1)koto (1)vitorfhc (1)K4r1it0 (1)weizman (1)

New vectors

Characters appended at the end of TLD within URL, which yield in the same Origin HTML TAGS Lists Bytes that will scramble ISO-2022-JP Bytes that will normalize ISO-2022-JP Characters allowed after equals sign for event Unicode characters that get normalized into path traversal characters ISO-2022-JP ASCII escape sequence Impossible lab frameset Find WAF bypass for eval context Characters transformed when using lowercase Characters transformed when using uppercase Chars in href that will not default to full URL Non-standard characters that break JSON.parse()HTML elements that inherit properties which return the full URL URL scheme separator alternatives Characters that can be between < and script>Characters that cause the backslash to be consumed with GBK charset Characters that can precede the javascript protocol copy2 Characters allowed javascript and colon copy2 copy2 Characters that close or encapsulate HTML attribute values

Most popular

URL domain dot alternatives (1974)DOM element relationships (1848)Characters between < and element name (1828)Characters allowed between hostname and / but don't change the hostname (1804)JavaScript Scheme starting with https:// (1714)Characters that can precede the javascript protocol (1684)Characters allowed javascript and colon copy2 (1623)< removal bypass (1468)characters allowed between exclamation mark and greater then (1395)Characters allowed javascript and colon (1386)Characters that close or encapsulate HTML attribute values (1382)Character that closes HTML tag (1273)Includes Validation Chars Allowed (1234)All properties on navigator (two levels of nesting deep) (1184)XSS vectors that consume tag (1176)Characters allowed after hostname but don't change the hostname (1170)Entities that cause an external URL before @ (1158)Characters that can precede the javascript protocol copy2 (1093)HTML entities that create ASCII characters inside a JavaScript URL (1080)Characters allowed javascript and colon copy2 copy2 (1051)

Most liked

URL domain dot alternatives (5)Characters allowed between hostname and / but don't change the hostname (4)Entities that cause an external URL before @ (4)JavaScript Scheme starting with https:// (4)Characters allowed javascript and colon (3)HTML entities that create ASCII characters inside a JavaScript URL (3)Characters that cause exceptions when URL encoded (2)Characters that cause an external URL before @ (2)Characters allowed between multiple HTML attributes (2)HTML elements that are self closing or different text content (2)Characters allowed in-between operators (2)Characters that can start an HTML comment (2)XSS vectors that consume tag (2)Characters allowed after hostname but don't change the hostname (2)Characters that can precede the javascript protocol (2)Properties that contain URLs (2)All events on window (1)Characters allowed at IPv6 but don't change the hostname (1)Characters allowed at hostname (1)Characters that change length on .toLowerCase() (1)