Shazzer logo

Characters allowed between in operator

Chrome logo 25
Firefox logo 25
Edge logo 25
Safari logo 25

Characters allowed between in operator

hackvertor
Created byhackvertor
Created Apr 3, 2024
Updated May 25, 2025

Tweet
Detecting browser...
CategoryXSS Execution
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
1337$[chr]in$[chr]log($[i])

Sample payloads

133709in0x09alert(9)
1337
in
alert(10)
13370x0Bin0x0Balert(11)
13370x0Cin0x0Calert(12)
13370x0Din0x0Dalert(13)
1337 in alert(32)
1337 in alert(160)
1337inalert(5760)
1337 in alert(8192)
1337inalert(8193)
1337inalert(8194)
1337inalert(8195)
1337inalert(8196)
1337inalert(8197)
1337inalert(8198)
1337inalert(8199)
1337inalert(8200)
1337inalert(8201)
1337inalert(8202)
1337inalert(8232)

Fuzz results

Chrome logo
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated17 Feb 2026
Found 25 results
Loading...
Chrome logo
Chrome 144.0.0.0 desktop macOS 10.15.7older version
Updated17 Feb 2026
Found 25 results
Loading...
Chrome logo
Chrome 123.0.0.0 Unknown Unknownolder version
Updated3 Apr 2024
Found 25 results
Loading...
Firefox logo
Firefox 147.0 desktop Linux
Updated1 Feb 2026
Found 25 results
Loading...
Firefox logo
Firefox 124.0 Unknown Unknownolder version
Updated14 Apr 2024
Found 25 results
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated31 Jan 2026
Found 25 results
Loading...
Safari logo
Safari 17.4 Unknown Unknown
Updated14 Apr 2024
Found 25 results
Loading...