- Home
- Login
- Vectors
- Unicode table
- Help
- Home
- Login
- Vectors
- Unicode table
- Help

Unicode table

From-To

Loading...

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor

New users

Vozec phn0me sgscanner CoreyD97 oiiwroo semimitoz tzqT qiwan007 tav-r ender19878 SamyakJain0 ViktorMares JR0ch17 Boshikuso FU11-M00N ChanchalSakardeQH Maltemo yancangyun01 HeroGamers HackerAndya

Popular users

hackvertor (27)joaxcar (5)renniepak (4)masatokinugawa (3)JorianWoltjer (2)albinowax (2)0x999-x (2)d0ge (1)freddyb (1)ThomasOrlita (1)DreyAnd (1)K4r1it0 (1)securaji (1)InsertScript (1)koto (1)B-i-t-K (1)sqjor (1)ola456 (1)vitorfhc (1)weizman (1)

New vectors

Impossible lab frameset Find WAF bypass for eval context Characters transformed when using lowercase Characters transformed when using uppercase Chars in href that will not default to full URL Non-standard characters that break JSON.parse()HTML elements that inherit properties which return the full URL URL scheme separator alternatives Characters that can be between < and script>Characters that cause the backslash to be consumed with GBK charset Characters that can precede the javascript protocol copy2 Characters allowed javascript and colon copy2 copy2 Characters that close or encapsulate HTML attribute values XSS vectors that consume tag HTML tags and attributes that can be used to access the URL HTML tags that can clobber the credentials part of the URL Characters that cause the backslash to be consumed with a big5 charset Differences between escape vs encodeURIComponent < removal bypass Entities in-between square brackets that close cdata

Most popular

URL domain dot alternatives (1379)DOM element relationships (1278)Characters between < and element name (1271)Characters allowed between hostname and / but don't change the hostname (1240)Characters that can precede the javascript protocol (1199)Characters allowed javascript and colon copy2 (1180)JavaScript Scheme starting with https:// (1148)< removal bypass (1041)characters allowed between exclamation mark and greater then (991)Characters allowed javascript and colon (973)Characters that close or encapsulate HTML attribute values (940)Character that closes HTML tag (926)Includes Validation Chars Allowed (906)All properties on navigator (two levels of nesting deep) (873)Characters allowed after hostname but don't change the hostname (834)Entities that cause an external URL before @ (800)HTML entities that create ASCII characters inside a JavaScript URL (793)XSS vectors that consume tag (781)work (743)Characters that cause exceptions when URL encoded (717)

Most liked

Characters allowed between hostname and / but don't change the hostname (4)Entities that cause an external URL before @ (4)JavaScript Scheme starting with https:// (4)URL domain dot alternatives (4)XSS vectors that consume tag (2)Characters that cause an external URL before @ (2)HTML entities that create ASCII characters inside a JavaScript URL (2)Characters allowed javascript and colon (2)Characters allowed in-between operators (2)HTML elements that are self closing or different text content (2)Characters that cause exceptions when URL encoded (2)Characters allowed after hostname but don't change the hostname (2)Characters allowed between multiple HTML attributes (2)Characters that can precede the javascript protocol (2)Properties that contain URLs (2)All events on window (1)Characters allowed at IPv6 but don't change the hostname (1)Characters allowed at hostname (1)Characters that change length on .toLowerCase() (1)HTML elements that parse differently when rendered (1)