Characters urlencoded that get transformed when using the credentials part of the URL

This vector shows which characters that are URL decoded in the credentials part

Created by: hackvertor

Created on: Tuesday, September 24, 2024 at 9:17:56 AM

Updated on: Friday, September 27, 2024 at 2:48:24 PM

Vector type: JS

Code used before fuzz:
const anchor = document.createElement('a');

Template used:

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint($[i]));
if(!/%/.test(anchor+''))log($[i])

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(33));
if(!/%/.test(anchor+''))alert(33)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(40));
if(!/%/.test(anchor+''))alert(40)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(41));
if(!/%/.test(anchor+''))alert(41)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(42));
if(!/%/.test(anchor+''))alert(42)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(45));
if(!/%/.test(anchor+''))alert(45)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(46));
if(!/%/.test(anchor+''))alert(46)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(48));
if(!/%/.test(anchor+''))alert(48)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(49));
if(!/%/.test(anchor+''))alert(49)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(50));
if(!/%/.test(anchor+''))alert(50)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(51));
if(!/%/.test(anchor+''))alert(51)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(52));
if(!/%/.test(anchor+''))alert(52)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(53));
if(!/%/.test(anchor+''))alert(53)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(54));
if(!/%/.test(anchor+''))alert(54)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(55));
if(!/%/.test(anchor+''))alert(55)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(56));
if(!/%/.test(anchor+''))alert(56)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(57));
if(!/%/.test(anchor+''))alert(57)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(65));
if(!/%/.test(anchor+''))alert(65)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(66));
if(!/%/.test(anchor+''))alert(66)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(67));
if(!/%/.test(anchor+''))alert(67)

anchor.href='//example.com';
anchor.username = encodeURIComponent(String.fromCodePoint(68));
if(!/%/.test(anchor+''))alert(68)

Fuzz results

Chrome 129.0.0.0 desktop macOS 10.15.7

Tue Sep 24 2024

Found 70 results

Show differences only?

Filter out alphanumeric

Dec	Hex	Chr
33	21	!

Dec	Hex	Chr
40	28	(

Dec	Hex	Chr
41	29	)

Dec	Hex	Chr
42	2a	*

Dec	Hex	Chr
45	2d	-

Dec	Hex	Chr
46	2e	.

Dec	Hex	Chr
48	30	0

Dec	Hex	Chr
49	31	1

Dec	Hex	Chr
50	32	2

Dec	Hex	Chr
51	33	3

Dec	Hex	Chr
52	34	4

Dec	Hex	Chr
53	35	5

Dec	Hex	Chr
54	36	6

Dec	Hex	Chr
55	37	7

Dec	Hex	Chr
56	38	8

Dec	Hex	Chr
57	39	9

Dec	Hex	Chr
65	41	A

Dec	Hex	Chr
66	42	B

Dec	Hex	Chr
67	43	C

Dec	Hex	Chr
68	44	D

Dec	Hex	Chr
69	45	E

Dec	Hex	Chr
70	46	F

Dec	Hex	Chr
71	47	G

Dec	Hex	Chr
72	48	H

Dec	Hex	Chr
73	49	I

Dec	Hex	Chr
74	4a	J

Dec	Hex	Chr
75	4b	K

Dec	Hex	Chr
76	4c	L

Dec	Hex	Chr
77	4d	M

Dec	Hex	Chr
78	4e	N

Dec	Hex	Chr
79	4f	O

Dec	Hex	Chr
80	50	P

Dec	Hex	Chr
81	51	Q

Dec	Hex	Chr
82	52	R

Dec	Hex	Chr
83	53	S

Dec	Hex	Chr
84	54	T

Dec	Hex	Chr
85	55	U

Dec	Hex	Chr
86	56	V

Dec	Hex	Chr
87	57	W

Dec	Hex	Chr
88	58	X

Dec	Hex	Chr
89	59	Y

Dec	Hex	Chr
90	5a	Z

Dec	Hex	Chr
95	5f	_

Dec	Hex	Chr
97	61	a

Dec	Hex	Chr
98	62	b

Dec	Hex	Chr
99	63	c

Dec	Hex	Chr
100	64	d

Dec	Hex	Chr
101	65	e

Dec	Hex	Chr
102	66	f

Dec	Hex	Chr
103	67	g

Dec	Hex	Chr
104	68	h

Dec	Hex	Chr
105	69	i

Dec	Hex	Chr
106	6a	j

Dec	Hex	Chr
107	6b	k

Dec	Hex	Chr
108	6c	l

Dec	Hex	Chr
109	6d	m

Dec	Hex	Chr
110	6e	n

Dec	Hex	Chr
111	6f	o

Dec	Hex	Chr
112	70	p

Dec	Hex	Chr
113	71	q

Dec	Hex	Chr
114	72	r

Dec	Hex	Chr
115	73	s

Dec	Hex	Chr
116	74	t

Dec	Hex	Chr
117	75	u

Dec	Hex	Chr
118	76	v

Dec	Hex	Chr
119	77	w

Dec	Hex	Chr
120	78	x

Dec	Hex	Chr
121	79	y

Dec	Hex	Chr
122	7a	z

Dec	Hex	Chr
126	7e	~

Firefox 130.0 desktop macOS 10.15

Tue Sep 24 2024

Found 71 results

Show differences only?

Filter out alphanumeric

Dec	Hex	Chr
33	21	!

Dec	Hex	Chr
39	27	'

Dec	Hex	Chr
40	28	(

Dec	Hex	Chr
41	29	)

Dec	Hex	Chr
42	2a	*

Dec	Hex	Chr
45	2d	-

Dec	Hex	Chr
46	2e	.

Dec	Hex	Chr
48	30	0

Dec	Hex	Chr
49	31	1

Dec	Hex	Chr
50	32	2

Dec	Hex	Chr
51	33	3

Dec	Hex	Chr
52	34	4

Dec	Hex	Chr
53	35	5

Dec	Hex	Chr
54	36	6

Dec	Hex	Chr
55	37	7

Dec	Hex	Chr
56	38	8

Dec	Hex	Chr
57	39	9

Dec	Hex	Chr
65	41	A

Dec	Hex	Chr
66	42	B

Dec	Hex	Chr
67	43	C

Dec	Hex	Chr
68	44	D

Dec	Hex	Chr
69	45	E

Dec	Hex	Chr
70	46	F

Dec	Hex	Chr
71	47	G

Dec	Hex	Chr
72	48	H

Dec	Hex	Chr
73	49	I

Dec	Hex	Chr
74	4a	J

Dec	Hex	Chr
75	4b	K

Dec	Hex	Chr
76	4c	L

Dec	Hex	Chr
77	4d	M

Dec	Hex	Chr
78	4e	N

Dec	Hex	Chr
79	4f	O

Dec	Hex	Chr
80	50	P

Dec	Hex	Chr
81	51	Q

Dec	Hex	Chr
82	52	R

Dec	Hex	Chr
83	53	S

Dec	Hex	Chr
84	54	T

Dec	Hex	Chr
85	55	U

Dec	Hex	Chr
86	56	V

Dec	Hex	Chr
87	57	W

Dec	Hex	Chr
88	58	X

Dec	Hex	Chr
89	59	Y

Dec	Hex	Chr
90	5a	Z

Dec	Hex	Chr
95	5f	_

Dec	Hex	Chr
97	61	a

Dec	Hex	Chr
98	62	b

Dec	Hex	Chr
99	63	c

Dec	Hex	Chr
100	64	d

Dec	Hex	Chr
101	65	e

Dec	Hex	Chr
102	66	f

Dec	Hex	Chr
103	67	g

Dec	Hex	Chr
104	68	h

Dec	Hex	Chr
105	69	i

Dec	Hex	Chr
106	6a	j

Dec	Hex	Chr
107	6b	k

Dec	Hex	Chr
108	6c	l

Dec	Hex	Chr
109	6d	m

Dec	Hex	Chr
110	6e	n

Dec	Hex	Chr
111	6f	o

Dec	Hex	Chr
112	70	p

Dec	Hex	Chr
113	71	q

Dec	Hex	Chr
114	72	r

Dec	Hex	Chr
115	73	s

Dec	Hex	Chr
116	74	t

Dec	Hex	Chr
117	75	u

Dec	Hex	Chr
118	76	v

Dec	Hex	Chr
119	77	w

Dec	Hex	Chr
120	78	x

Dec	Hex	Chr
121	79	y

Dec	Hex	Chr
122	7a	z

Dec	Hex	Chr
126	7e	~

Safari 18.0 desktop macOS 10.15.7

Tue Sep 24 2024

Found 71 results

Show differences only?

Filter out alphanumeric

Dec	Hex	Chr
33	21	!

Dec	Hex	Chr
39	27	'

Dec	Hex	Chr
40	28	(

Dec	Hex	Chr
41	29	)

Dec	Hex	Chr
42	2a	*

Dec	Hex	Chr
45	2d	-

Dec	Hex	Chr
46	2e	.

Dec	Hex	Chr
48	30	0

Dec	Hex	Chr
49	31	1

Dec	Hex	Chr
50	32	2

Dec	Hex	Chr
51	33	3

Dec	Hex	Chr
52	34	4

Dec	Hex	Chr
53	35	5

Dec	Hex	Chr
54	36	6

Dec	Hex	Chr
55	37	7

Dec	Hex	Chr
56	38	8

Dec	Hex	Chr
57	39	9

Dec	Hex	Chr
65	41	A

Dec	Hex	Chr
66	42	B

Dec	Hex	Chr
67	43	C

Dec	Hex	Chr
68	44	D

Dec	Hex	Chr
69	45	E

Dec	Hex	Chr
70	46	F

Dec	Hex	Chr
71	47	G

Dec	Hex	Chr
72	48	H

Dec	Hex	Chr
73	49	I

Dec	Hex	Chr
74	4a	J

Dec	Hex	Chr
75	4b	K

Dec	Hex	Chr
76	4c	L

Dec	Hex	Chr
77	4d	M

Dec	Hex	Chr
78	4e	N

Dec	Hex	Chr
79	4f	O

Dec	Hex	Chr
80	50	P

Dec	Hex	Chr
81	51	Q

Dec	Hex	Chr
82	52	R

Dec	Hex	Chr
83	53	S

Dec	Hex	Chr
84	54	T

Dec	Hex	Chr
85	55	U

Dec	Hex	Chr
86	56	V

Dec	Hex	Chr
87	57	W

Dec	Hex	Chr
88	58	X

Dec	Hex	Chr
89	59	Y

Dec	Hex	Chr
90	5a	Z

Dec	Hex	Chr
95	5f	_

Dec	Hex	Chr
97	61	a

Dec	Hex	Chr
98	62	b

Dec	Hex	Chr
99	63	c

Dec	Hex	Chr
100	64	d

Dec	Hex	Chr
101	65	e

Dec	Hex	Chr
102	66	f

Dec	Hex	Chr
103	67	g

Dec	Hex	Chr
104	68	h

Dec	Hex	Chr
105	69	i

Dec	Hex	Chr
106	6a	j

Dec	Hex	Chr
107	6b	k

Dec	Hex	Chr
108	6c	l

Dec	Hex	Chr
109	6d	m

Dec	Hex	Chr
110	6e	n

Dec	Hex	Chr
111	6f	o

Dec	Hex	Chr
112	70	p

Dec	Hex	Chr
113	71	q

Dec	Hex	Chr
114	72	r

Dec	Hex	Chr
115	73	s

Dec	Hex	Chr
116	74	t

Dec	Hex	Chr
117	75	u

Dec	Hex	Chr
118	76	v

Dec	Hex	Chr
119	77	w

Dec	Hex	Chr
120	78	x

Dec	Hex	Chr
121	79	y

Dec	Hex	Chr
122	7a	z

Dec	Hex	Chr
126	7e	~