Shazzer

Enumerating...

Shared online fuzzer

Fuzzing browsers since 2012

Characters matching URLPattern capture group
Supported HTML and attributes by the Sanitizer
Characters prepended to URL, which yield in the same host property
Unicode "Latin" characters using \p{scx=Latin} RegEx
Characters that cause the backslash to be consumed with a big5 charset
Characters that are valid JS variables
Characters that cause the backslash to be consumed with GBK charset
Characters after https URI scheme which prevent URL parsing of href
Characters allowed while closing script tag
CSS inline property definition
Chars allowed between src and = in img tag
Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost
Url parsing diff b/w window.open and new URL
characters allowed between exclamation mark and greater then
Characters that close or encapsulate HTML attribute values
Character that closes HTML tag
Characters that starts element name
Includes Validation Chars Allowed
XSS vectors that consume tag
Escape inline double quote

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Shazzer - Shared online fuzzing