Properties that are accessible on location

This vector attempts to see which properties are available on the parent location object of sandboxed iframe.

Created by: hackvertor

Created on: Friday, June 7, 2024 at 8:01:40 PM

Updated on: Sunday, July 14, 2024 at 7:46:48 PM

Vector type: JS

Code used before fuzz:
const props = Object.getOwnPropertyNames(location);
props.forEach(prop => {
    try {
         if(typeof parent.location[prop] !== 'undefined') {
             log(prop);
          }
    } catch{}
})
Template used:
1337
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

1337

Fuzz results

Chrome logo
Chrome 125.0.0.0 desktop macOS 10.15.7
Found 1 result
Data
replace
Firefox logo
Firefox 126.0 desktop macOS 10.15
Found 1 result
Data
replace
Safari logo
Safari 17.5 desktop macOS 10.15.7
Found 1 result
Data
replace
Safari logo
Safari 17.5 mobile iOS 17.5.1
Found 1 result
Data
replace