Entities allowed after slashes on a protocol relative URL
12
12
12
You can place whitespace after slashes, this vector finds out what entities you can place after them.
Created by: hackvertor
Created on: Saturday, July 6, 2024 at 11:50:39 AM
Updated on: Thursday, September 26, 2024 at 1:47:05 PM
Vector type: JS
Code used before fuzz:
const div = document.createElement('div')
Template used:
div.innerHTML='<a href="//$[data1]example.com">';
if(div.querySelector('a').host === 'example.com') {
log('$[data1]');
}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
div.innerHTML='<a href="//\example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('\');
}
div.innerHTML='<a href="//@example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('@');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
div.innerHTML='<a href="//
example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('
');
}
div.innerHTML='<a href="//⁠example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('⁠');
}
div.innerHTML='<a href="//­example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('­');
}
div.innerHTML='<a href="///example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('/');
}
div.innerHTML='<a href="//	example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('	');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
Fuzz results
Safari 17.5 mobile iOS 17.5.1
Updated
Sat Jul 06 2024
Found 12 results
Data |
---|
\ |
Data |
---|
@ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|

 |
Data |
---|
⁠ |
Data |
---|
­ |
Data |
---|
/ |
Data |
---|
	 |
Data |
---|
​ |
Chrome 126.0.0.0 desktop macOS 10.15.7
Updated
Sat Jul 06 2024
Found 12 results
Data |
---|
\ |
Data |
---|
@ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|

 |
Data |
---|
⁠ |
Data |
---|
­ |
Data |
---|
/ |
Data |
---|
	 |
Data |
---|
​ |
Firefox 127.0 desktop macOS 10.15
Updated
Sat Jul 06 2024
Found 12 results
Data |
---|
\ |
Data |
---|
@ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|
​ |
Data |
---|

 |
Data |
---|
⁠ |
Data |
---|
­ |
Data |
---|
/ |
Data |
---|
	 |
Data |
---|
​ |