ToUpperCase Improper Character Morphing
6
6Checks for any special characters which are converted to something else when uppercased.
Created by: IDKdir
Created on: Saturday, July 13, 2024 at 9:47:15 PM
Updated on: Tuesday, May 27, 2025 at 8:15:32 AM
Category: JavaScript Syntax
Vector visibility: Public
Vector type: JS
Vector charset: UTF-8
Template used:
var targets=['"','\'','<','/','>','\\']0x0D
if (targets.includes('$[chr]'.toUpperCase())) {0x0D
log($[i]+' (normal) ($[chr] -> '+"$[chr]".toUpperCase()+')')0x0D
}0x0D
0x0D
if (targets.includes('$[chr]'.toLocaleUpperCase())) {0x0D
log($[i]+' (locale) ($[chr] -> '+"$[chr]".toLocaleUpperCase()+')')0x0D
}Detecting browser...
Sample payloads
var targets=['"','\'','<','/','>','\\']0x0D
if (targets.includes('0x00'.toUpperCase())) {0x0D
alert(0+' (normal) (0x00 -> '+"0x00".toUpperCase()+')')0x0D
}0x0D
0x0D
if (targets.includes('0x00'.toLocaleUpperCase())) {0x0D
alert(0+' (locale) (0x00 -> '+"0x00".toLocaleUpperCase()+')')0x0D
}Fuzz results
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated
Sat Jan 31 2026
Found 6 results
Loading...
Chrome 143.0.0.0 desktop macOS 10.15.7older version
Updated
Sun Jan 25 2026
Found 6 results
Loading...
Firefox 128.0 desktop Windows NT 10.0
Updated
Sat Jul 13 2024
Found 6 results
Loading...