All Vectors

Vector nameUser Created Type Likes
Characters prepended to URL host. check if difference between URL and a tagInsertScript1/10/2025JS0
Chrome logo 30
Characters prepended to URL, which yield in the same host propertyInsertScript1/10/2025JS0
Chrome logo 31
Characters appended at the end of TLD within URL, which yield in the same host propertyInsertScript1/10/2025JS0
Chrome logo 6
Allowed characters right after tag name & before tag closure, no other characters in betweenhansmach1ne1/9/2025XSS0
Chrome logo 25
Loose comparison, characters appended which still result in type coercionhansmach1ne1/6/2025JS0
Chrome logo 16
Difference between browser-supported handlers and Shazzer 'all_browser_events' listhansmach1ne1/5/2025JS0
Chrome logo 20
Difference between browser-supported handlers and Shazzer 'events' listhansmach1ne1/5/2025JS0
Chrome logo 275
Characters appended at the end of TLD within URL, which yield in the same Originhansmach1ne1/5/2025JS2
Chrome logo 127
HTML TAGS ListsY4tacker1/3/2025XSS0
Chrome logo 2
Bytes that will scramble ISO-2022-JPCillian-Collins12/26/2024XSS1
Chrome logo 2
Bytes that will normalize ISO-2022-JPCillian-Collins12/26/2024XSS1
Firefox logo 30
Chrome logo 30
Characters allowed after equals sign for eventYouGina12/17/2024XSS1
Chrome logo 12
Unicode characters that get normalized into path traversal characters hackvertor12/12/2024JS2
Chrome logo 2
Firefox logo 2
Safari logo 2
ISO-2022-JP ASCII escape sequencehackvertor12/11/2024XSS1
Impossible lab framesetrenniepak11/27/2024HTML0
Find WAF bypass for eval contextelieehel11/22/2024JS0
Safari logo 1
Firefox logo 1
Chrome logo 1
Characters transformed when using lowercasehackvertor11/18/2024JS0
Safari logo 10
Firefox logo 10
Chrome logo 10
Characters transformed when using uppercasehackvertor11/18/2024JS0
Chrome logo 2124
Chars in href that will not default to full URLjoaxcar11/16/2024XSS0
Chrome logo 29
Non-standard characters that break JSON.parse()DreyAnd11/15/2024JS1

Found 182 records

Page 1 of 10