Characters that expand upon toUpperCase()

Useful to bypass strict length checks and differentials between toUpperCase() / toLowerCase() .

Created on: Wednesday, April 10, 2024 at 10:34:26 PM

Updated on: Friday, July 12, 2024 at 2:52:47 AM

Vector type: JS

Code used before fuzz:

function isASCII(str) {
  for (var i = 0; i < str.length; i++) {
    if (str.charCodeAt(i) > 127) {
      return false;
    }
  }
  return true;
}

Template used:

const c = String.fromCodePoint(i)
const c_upper = c.toUpperCase()
if (c_upper.length > c.length && isASCII(c_upper)){
    log(c)
}

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

const c = String.fromCodePoint(i)
const c_upper = c.toUpperCase()
if (c_upper.length > c.length && isASCII(c_upper)){
    alert(c)
}

Chrome 124.0.0.0 Unknown Unknown

Found 8 results

Show differences only?

Data
ﬀ

Data
ﬃ

Data
ﬄ

Data
ﬁ

Data
ﬂ

Data
ß

Data
ﬆ

Data
ﬅ