Attributes that are also DOM properties
This vector enumerates HTML attributes and discovers if they have a corresponding DOM property.
Created by: hackvertor
Created on: Tuesday, April 30, 2024 at 9:17:50 PM
Updated on: Thursday, July 25, 2024 at 1:14:02 AM
Vector type: XSS
Template used:
<div id=x $[data1]=x></div>
Code used after fuzz:
if(document.getElementById('x')['$[data1]'])log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<div id=x align=x></div>
<div id=x autocapitalize=x></div>
<div id=x hidden=x></div>
<div id=x id=x></div>
<div id=x lang=x></div>
<div id=x role=x></div>
<div id=x slot=x></div>
<div id=x spellcheck=x></div>
<div id=x style=x></div>
<div id=x title=x></div>
<div id=x translate=x></div>
Fuzz results
![Chrome logo](/_next/image?url=%2Flogos%2Fbrowsers%2Fchrome.png&w=64&q=75)
Chrome 125.0.0.0 Unknown Unknown
Found 11 results
Data |
---|
align |
Data |
---|
autocapitalize |
Data |
---|
hidden |
Data |
---|
id |
Data |
---|
lang |
Data |
---|
role |
Data |
---|
slot |
Data |
---|
spellcheck |
Data |
---|
style |
Data |
---|
title |
Data |
---|
translate |
![Firefox logo](/_next/image?url=%2Flogos%2Fbrowsers%2Ffirefox.png&w=64&q=75)
Firefox 125.0 Unknown Unknown
Found 10 results
Data |
---|
align |
Data |
---|
autocapitalize |
Data |
---|
hidden |
Data |
---|
id |
Data |
---|
lang |
Data |
---|
role |
Data |
---|
slot |
Data |
---|
style |
Data |
---|
title |
Data |
---|
translate |
![Safari logo](/_next/image?url=%2Flogos%2Fbrowsers%2Fsafari.png&w=64&q=75)
Safari 17.4 Unknown Unknown
Found 10 results
Data |
---|
align |
Data |
---|
hidden |
Data |
---|
id |
Data |
---|
lang |
Data |
---|
role |
Data |
---|
slot |
Data |
---|
spellcheck |
Data |
---|
style |
Data |
---|
title |
Data |
---|
translate |