Characters not urlencoded when using the credentials part of the URL

This vector shows which characters are not encoded in the credentials part of the URL.

Created by: hackvertor

Created on: Tuesday, May 28, 2024 at 10:11:36 PM

Updated on: Saturday, August 24, 2024 at 2:54:56 PM

Vector type: JS

Code used before fuzz:
const anchor = document.createElement('a');

Template used:

anchor.href='//example.com';
anchor.username = String.fromCodePoint($[i]);
if(!/%/.test(anchor+''))log($[i])

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(33);
if(!/%/.test(anchor+''))alert(33)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(36);
if(!/%/.test(anchor+''))alert(36)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(38);
if(!/%/.test(anchor+''))alert(38)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(40);
if(!/%/.test(anchor+''))alert(40)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(41);
if(!/%/.test(anchor+''))alert(41)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(42);
if(!/%/.test(anchor+''))alert(42)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(43);
if(!/%/.test(anchor+''))alert(43)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(44);
if(!/%/.test(anchor+''))alert(44)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(45);
if(!/%/.test(anchor+''))alert(45)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(46);
if(!/%/.test(anchor+''))alert(46)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(48);
if(!/%/.test(anchor+''))alert(48)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(49);
if(!/%/.test(anchor+''))alert(49)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(50);
if(!/%/.test(anchor+''))alert(50)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(51);
if(!/%/.test(anchor+''))alert(51)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(52);
if(!/%/.test(anchor+''))alert(52)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(53);
if(!/%/.test(anchor+''))alert(53)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(54);
if(!/%/.test(anchor+''))alert(54)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(55);
if(!/%/.test(anchor+''))alert(55)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(56);
if(!/%/.test(anchor+''))alert(56)

anchor.href='//example.com';
anchor.username = String.String.fromCodePoint(57);
if(!/%/.test(anchor+''))alert(57)

Fuzz results

Chrome 125.0.0.0 Unknown Unknown

Found 74 results

Show differences only?

Dec	Hex	Chr
33	21	!

Dec	Hex	Chr
36	24	$

Dec	Hex	Chr
38	26	&

Dec	Hex	Chr
40	28	(

Dec	Hex	Chr
41	29	)

Dec	Hex	Chr
42	2a	*

Dec	Hex	Chr
43	2b	+

Dec	Hex	Chr
44	2c	,

Dec	Hex	Chr
45	2d	-

Dec	Hex	Chr
46	2e	.

Dec	Hex	Chr
48	30	0

Dec	Hex	Chr
49	31	1

Dec	Hex	Chr
50	32	2

Dec	Hex	Chr
51	33	3

Dec	Hex	Chr
52	34	4

Dec	Hex	Chr
53	35	5

Dec	Hex	Chr
54	36	6

Dec	Hex	Chr
55	37	7

Dec	Hex	Chr
56	38	8

Dec	Hex	Chr
57	39	9

Dec	Hex	Chr
65	41	A

Dec	Hex	Chr
66	42	B

Dec	Hex	Chr
67	43	C

Dec	Hex	Chr
68	44	D

Dec	Hex	Chr
69	45	E

Dec	Hex	Chr
70	46	F

Dec	Hex	Chr
71	47	G

Dec	Hex	Chr
72	48	H

Dec	Hex	Chr
73	49	I

Dec	Hex	Chr
74	4a	J

Dec	Hex	Chr
75	4b	K

Dec	Hex	Chr
76	4c	L

Dec	Hex	Chr
77	4d	M

Dec	Hex	Chr
78	4e	N

Dec	Hex	Chr
79	4f	O

Dec	Hex	Chr
80	50	P

Dec	Hex	Chr
81	51	Q

Dec	Hex	Chr
82	52	R

Dec	Hex	Chr
83	53	S

Dec	Hex	Chr
84	54	T

Dec	Hex	Chr
85	55	U

Dec	Hex	Chr
86	56	V

Dec	Hex	Chr
87	57	W

Dec	Hex	Chr
88	58	X

Dec	Hex	Chr
89	59	Y

Dec	Hex	Chr
90	5a	Z

Dec	Hex	Chr
95	5f	_

Dec	Hex	Chr
97	61	a

Dec	Hex	Chr
98	62	b

Dec	Hex	Chr
99	63	c

Dec	Hex	Chr
100	64	d

Dec	Hex	Chr
101	65	e

Dec	Hex	Chr
102	66	f

Dec	Hex	Chr
103	67	g

Dec	Hex	Chr
104	68	h

Dec	Hex	Chr
105	69	i

Dec	Hex	Chr
106	6a	j

Dec	Hex	Chr
107	6b	k

Dec	Hex	Chr
108	6c	l

Dec	Hex	Chr
109	6d	m

Dec	Hex	Chr
110	6e	n

Dec	Hex	Chr
111	6f	o

Dec	Hex	Chr
112	70	p

Dec	Hex	Chr
113	71	q

Dec	Hex	Chr
114	72	r

Dec	Hex	Chr
115	73	s

Dec	Hex	Chr
116	74	t

Dec	Hex	Chr
117	75	u

Dec	Hex	Chr
118	76	v

Dec	Hex	Chr
119	77	w

Dec	Hex	Chr
120	78	x

Dec	Hex	Chr
121	79	y

Dec	Hex	Chr
122	7a	z

Dec	Hex	Chr
126	7e	~

Firefox 126.0 Unknown Unknown

Found 75 results

Show differences only?

Dec	Hex	Chr
33	21	!

Dec	Hex	Chr
36	24	$

Dec	Hex	Chr
38	26	&

Dec	Hex	Chr
39	27	'

Dec	Hex	Chr
40	28	(

Dec	Hex	Chr
41	29	)

Dec	Hex	Chr
42	2a	*

Dec	Hex	Chr
43	2b	+

Dec	Hex	Chr
44	2c	,

Dec	Hex	Chr
45	2d	-

Dec	Hex	Chr
46	2e	.

Dec	Hex	Chr
48	30	0

Dec	Hex	Chr
49	31	1

Dec	Hex	Chr
50	32	2

Dec	Hex	Chr
51	33	3

Dec	Hex	Chr
52	34	4

Dec	Hex	Chr
53	35	5

Dec	Hex	Chr
54	36	6

Dec	Hex	Chr
55	37	7

Dec	Hex	Chr
56	38	8

Dec	Hex	Chr
57	39	9

Dec	Hex	Chr
65	41	A

Dec	Hex	Chr
66	42	B

Dec	Hex	Chr
67	43	C

Dec	Hex	Chr
68	44	D

Dec	Hex	Chr
69	45	E

Dec	Hex	Chr
70	46	F

Dec	Hex	Chr
71	47	G

Dec	Hex	Chr
72	48	H

Dec	Hex	Chr
73	49	I

Dec	Hex	Chr
74	4a	J

Dec	Hex	Chr
75	4b	K

Dec	Hex	Chr
76	4c	L

Dec	Hex	Chr
77	4d	M

Dec	Hex	Chr
78	4e	N

Dec	Hex	Chr
79	4f	O

Dec	Hex	Chr
80	50	P

Dec	Hex	Chr
81	51	Q

Dec	Hex	Chr
82	52	R

Dec	Hex	Chr
83	53	S

Dec	Hex	Chr
84	54	T

Dec	Hex	Chr
85	55	U

Dec	Hex	Chr
86	56	V

Dec	Hex	Chr
87	57	W

Dec	Hex	Chr
88	58	X

Dec	Hex	Chr
89	59	Y

Dec	Hex	Chr
90	5a	Z

Dec	Hex	Chr
95	5f	_

Dec	Hex	Chr
97	61	a

Dec	Hex	Chr
98	62	b

Dec	Hex	Chr
99	63	c

Dec	Hex	Chr
100	64	d

Dec	Hex	Chr
101	65	e

Dec	Hex	Chr
102	66	f

Dec	Hex	Chr
103	67	g

Dec	Hex	Chr
104	68	h

Dec	Hex	Chr
105	69	i

Dec	Hex	Chr
106	6a	j

Dec	Hex	Chr
107	6b	k

Dec	Hex	Chr
108	6c	l

Dec	Hex	Chr
109	6d	m

Dec	Hex	Chr
110	6e	n

Dec	Hex	Chr
111	6f	o

Dec	Hex	Chr
112	70	p

Dec	Hex	Chr
113	71	q

Dec	Hex	Chr
114	72	r

Dec	Hex	Chr
115	73	s

Dec	Hex	Chr
116	74	t

Dec	Hex	Chr
117	75	u

Dec	Hex	Chr
118	76	v

Dec	Hex	Chr
119	77	w

Dec	Hex	Chr
120	78	x

Dec	Hex	Chr
121	79	y

Dec	Hex	Chr
122	7a	z

Dec	Hex	Chr
126	7e	~

Safari 17.4 Unknown Unknown

Found 75 results

Show differences only?

Dec	Hex	Chr
33	21	!

Dec	Hex	Chr
36	24	$

Dec	Hex	Chr
38	26	&

Dec	Hex	Chr
39	27	'

Dec	Hex	Chr
40	28	(

Dec	Hex	Chr
41	29	)

Dec	Hex	Chr
42	2a	*

Dec	Hex	Chr
43	2b	+

Dec	Hex	Chr
44	2c	,

Dec	Hex	Chr
45	2d	-

Dec	Hex	Chr
46	2e	.

Dec	Hex	Chr
48	30	0

Dec	Hex	Chr
49	31	1

Dec	Hex	Chr
50	32	2

Dec	Hex	Chr
51	33	3

Dec	Hex	Chr
52	34	4

Dec	Hex	Chr
53	35	5

Dec	Hex	Chr
54	36	6

Dec	Hex	Chr
55	37	7

Dec	Hex	Chr
56	38	8

Dec	Hex	Chr
57	39	9

Dec	Hex	Chr
65	41	A

Dec	Hex	Chr
66	42	B

Dec	Hex	Chr
67	43	C

Dec	Hex	Chr
68	44	D

Dec	Hex	Chr
69	45	E

Dec	Hex	Chr
70	46	F

Dec	Hex	Chr
71	47	G

Dec	Hex	Chr
72	48	H

Dec	Hex	Chr
73	49	I

Dec	Hex	Chr
74	4a	J

Dec	Hex	Chr
75	4b	K

Dec	Hex	Chr
76	4c	L

Dec	Hex	Chr
77	4d	M

Dec	Hex	Chr
78	4e	N

Dec	Hex	Chr
79	4f	O

Dec	Hex	Chr
80	50	P

Dec	Hex	Chr
81	51	Q

Dec	Hex	Chr
82	52	R

Dec	Hex	Chr
83	53	S

Dec	Hex	Chr
84	54	T

Dec	Hex	Chr
85	55	U

Dec	Hex	Chr
86	56	V

Dec	Hex	Chr
87	57	W

Dec	Hex	Chr
88	58	X

Dec	Hex	Chr
89	59	Y

Dec	Hex	Chr
90	5a	Z

Dec	Hex	Chr
95	5f	_

Dec	Hex	Chr
97	61	a

Dec	Hex	Chr
98	62	b

Dec	Hex	Chr
99	63	c

Dec	Hex	Chr
100	64	d

Dec	Hex	Chr
101	65	e

Dec	Hex	Chr
102	66	f

Dec	Hex	Chr
103	67	g

Dec	Hex	Chr
104	68	h

Dec	Hex	Chr
105	69	i

Dec	Hex	Chr
106	6a	j

Dec	Hex	Chr
107	6b	k

Dec	Hex	Chr
108	6c	l

Dec	Hex	Chr
109	6d	m

Dec	Hex	Chr
110	6e	n

Dec	Hex	Chr
111	6f	o

Dec	Hex	Chr
112	70	p

Dec	Hex	Chr
113	71	q

Dec	Hex	Chr
114	72	r

Dec	Hex	Chr
115	73	s

Dec	Hex	Chr
116	74	t

Dec	Hex	Chr
117	75	u

Dec	Hex	Chr
118	76	v

Dec	Hex	Chr
119	77	w

Dec	Hex	Chr
120	78	x

Dec	Hex	Chr
121	79	y

Dec	Hex	Chr
122	7a	z

Dec	Hex	Chr
126	7e	~

Chrome 125.0.0.0 desktop macOS 10.15.7

Found 74 results

Show differences only?

Dec	Hex	Chr
33	21	!

Dec	Hex	Chr
36	24	$

Dec	Hex	Chr
38	26	&

Dec	Hex	Chr
40	28	(

Dec	Hex	Chr
41	29	)

Dec	Hex	Chr
42	2a	*

Dec	Hex	Chr
43	2b	+

Dec	Hex	Chr
44	2c	,

Dec	Hex	Chr
45	2d	-

Dec	Hex	Chr
46	2e	.

Dec	Hex	Chr
48	30	0

Dec	Hex	Chr
49	31	1

Dec	Hex	Chr
50	32	2

Dec	Hex	Chr
51	33	3

Dec	Hex	Chr
52	34	4

Dec	Hex	Chr
53	35	5

Dec	Hex	Chr
54	36	6

Dec	Hex	Chr
55	37	7

Dec	Hex	Chr
56	38	8

Dec	Hex	Chr
57	39	9

Dec	Hex	Chr
65	41	A

Dec	Hex	Chr
66	42	B

Dec	Hex	Chr
67	43	C

Dec	Hex	Chr
68	44	D

Dec	Hex	Chr
69	45	E

Dec	Hex	Chr
70	46	F

Dec	Hex	Chr
71	47	G

Dec	Hex	Chr
72	48	H

Dec	Hex	Chr
73	49	I

Dec	Hex	Chr
74	4a	J

Dec	Hex	Chr
75	4b	K

Dec	Hex	Chr
76	4c	L

Dec	Hex	Chr
77	4d	M

Dec	Hex	Chr
78	4e	N

Dec	Hex	Chr
79	4f	O

Dec	Hex	Chr
80	50	P

Dec	Hex	Chr
81	51	Q

Dec	Hex	Chr
82	52	R

Dec	Hex	Chr
83	53	S

Dec	Hex	Chr
84	54	T

Dec	Hex	Chr
85	55	U

Dec	Hex	Chr
86	56	V

Dec	Hex	Chr
87	57	W

Dec	Hex	Chr
88	58	X

Dec	Hex	Chr
89	59	Y

Dec	Hex	Chr
90	5a	Z

Dec	Hex	Chr
95	5f	_

Dec	Hex	Chr
97	61	a

Dec	Hex	Chr
98	62	b

Dec	Hex	Chr
99	63	c

Dec	Hex	Chr
100	64	d

Dec	Hex	Chr
101	65	e

Dec	Hex	Chr
102	66	f

Dec	Hex	Chr
103	67	g

Dec	Hex	Chr
104	68	h

Dec	Hex	Chr
105	69	i

Dec	Hex	Chr
106	6a	j

Dec	Hex	Chr
107	6b	k

Dec	Hex	Chr
108	6c	l

Dec	Hex	Chr
109	6d	m

Dec	Hex	Chr
110	6e	n

Dec	Hex	Chr
111	6f	o

Dec	Hex	Chr
112	70	p

Dec	Hex	Chr
113	71	q

Dec	Hex	Chr
114	72	r

Dec	Hex	Chr
115	73	s

Dec	Hex	Chr
116	74	t

Dec	Hex	Chr
117	75	u

Dec	Hex	Chr
118	76	v

Dec	Hex	Chr
119	77	w

Dec	Hex	Chr
120	78	x

Dec	Hex	Chr
121	79	y

Dec	Hex	Chr
122	7a	z

Dec	Hex	Chr
126	7e	~

Safari 17.5 mobile iOS 17.5.1

Found 75 results

Show differences only?

Dec	Hex	Chr
33	21	!

Dec	Hex	Chr
36	24	$

Dec	Hex	Chr
38	26	&

Dec	Hex	Chr
39	27	'

Dec	Hex	Chr
40	28	(

Dec	Hex	Chr
41	29	)

Dec	Hex	Chr
42	2a	*

Dec	Hex	Chr
43	2b	+

Dec	Hex	Chr
44	2c	,

Dec	Hex	Chr
45	2d	-

Dec	Hex	Chr
46	2e	.

Dec	Hex	Chr
48	30	0

Dec	Hex	Chr
49	31	1

Dec	Hex	Chr
50	32	2

Dec	Hex	Chr
51	33	3

Dec	Hex	Chr
52	34	4

Dec	Hex	Chr
53	35	5

Dec	Hex	Chr
54	36	6

Dec	Hex	Chr
55	37	7

Dec	Hex	Chr
56	38	8

Dec	Hex	Chr
57	39	9

Dec	Hex	Chr
65	41	A

Dec	Hex	Chr
66	42	B

Dec	Hex	Chr
67	43	C

Dec	Hex	Chr
68	44	D

Dec	Hex	Chr
69	45	E

Dec	Hex	Chr
70	46	F

Dec	Hex	Chr
71	47	G

Dec	Hex	Chr
72	48	H

Dec	Hex	Chr
73	49	I

Dec	Hex	Chr
74	4a	J

Dec	Hex	Chr
75	4b	K

Dec	Hex	Chr
76	4c	L

Dec	Hex	Chr
77	4d	M

Dec	Hex	Chr
78	4e	N

Dec	Hex	Chr
79	4f	O

Dec	Hex	Chr
80	50	P

Dec	Hex	Chr
81	51	Q

Dec	Hex	Chr
82	52	R

Dec	Hex	Chr
83	53	S

Dec	Hex	Chr
84	54	T

Dec	Hex	Chr
85	55	U

Dec	Hex	Chr
86	56	V

Dec	Hex	Chr
87	57	W

Dec	Hex	Chr
88	58	X

Dec	Hex	Chr
89	59	Y

Dec	Hex	Chr
90	5a	Z

Dec	Hex	Chr
95	5f	_

Dec	Hex	Chr
97	61	a

Dec	Hex	Chr
98	62	b

Dec	Hex	Chr
99	63	c

Dec	Hex	Chr
100	64	d

Dec	Hex	Chr
101	65	e

Dec	Hex	Chr
102	66	f

Dec	Hex	Chr
103	67	g

Dec	Hex	Chr
104	68	h

Dec	Hex	Chr
105	69	i

Dec	Hex	Chr
106	6a	j

Dec	Hex	Chr
107	6b	k

Dec	Hex	Chr
108	6c	l

Dec	Hex	Chr
109	6d	m

Dec	Hex	Chr
110	6e	n

Dec	Hex	Chr
111	6f	o

Dec	Hex	Chr
112	70	p

Dec	Hex	Chr
113	71	q

Dec	Hex	Chr
114	72	r

Dec	Hex	Chr
115	73	s

Dec	Hex	Chr
116	74	t

Dec	Hex	Chr
117	75	u

Dec	Hex	Chr
118	76	v

Dec	Hex	Chr
119	77	w

Dec	Hex	Chr
120	78	x

Dec	Hex	Chr
121	79	y

Dec	Hex	Chr
122	7a	z

Dec	Hex	Chr
126	7e	~