Attributes that are also DOM properties

This vector enumerates HTML attributes and discovers if they have a corresponding DOM property.

Created by: hackvertor

Created on: Tuesday, April 30, 2024 at 9:17:50 PM

Updated on: Thursday, July 25, 2024 at 1:14:02 AM

Vector type: XSS

Template used:
<div id=x $[data1]=x></div>
Code used after fuzz:
if(document.getElementById('x')['$[data1]'])log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<div id=x align=x></div>
<div id=x autocapitalize=x></div>
<div id=x hidden=x></div>
<div id=x id=x></div>
<div id=x lang=x></div>
<div id=x role=x></div>
<div id=x slot=x></div>
<div id=x spellcheck=x></div>
<div id=x style=x></div>
<div id=x title=x></div>
<div id=x translate=x></div>

Fuzz results

Chrome logo
Chrome 125.0.0.0 Unknown Unknown
Found 11 results
Data
align
Data
autocapitalize
Data
hidden
Data
id
Data
lang
Data
role
Data
slot
Data
spellcheck
Data
style
Data
title
Data
translate
Firefox logo
Firefox 125.0 Unknown Unknown
Found 10 results
Data
align
Data
autocapitalize
Data
hidden
Data
id
Data
lang
Data
role
Data
slot
Data
style
Data
title
Data
translate
Safari logo
Safari 17.4 Unknown Unknown
Found 10 results
Data
align
Data
hidden
Data
id
Data
lang
Data
role
Data
slot
Data
spellcheck
Data
style
Data
title
Data
translate