Properties that are accessible on location

Chrome logo 1
Firefox logo 1
Safari logo 1

This vector attempts to see which properties are available on the parent location object of sandboxed iframe.

Created by: hackvertor

Created on: Friday, June 7, 2024 at 8:01:40 PM

Updated on: Monday, November 18, 2024 at 9:43:06 PM

Vector type: JS

Vector charset: UTF-8

Code used before fuzz:
const props = Object.getOwnPropertyNames(location);
props.forEach(prop => {
    try {
         if(typeof parent.location[prop] !== 'undefined') {
             log(prop);
          }
    } catch{}
})
Template used:
1337
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

1337

Fuzz results

Chrome logo
Chrome 125.0.0.0 desktop macOS 10.15.7

Updated

Fri Jun 07 2024
Found 1 result
Loading...
Firefox logo
Firefox 126.0 desktop macOS 10.15

Updated

Fri Jun 07 2024
Found 1 result
Loading...
Safari logo
Safari 17.5 desktop macOS 10.15.7

Updated

Fri Jun 07 2024
Found 1 result
Loading...
Safari logo
Safari 17.5 mobile iOS 17.5.1

Updated

Fri Jun 07 2024
Found 1 result
Loading...