Characters that cause an external URL before @

This vector shows what characters cause an external URL when used before an @

Created by: hackvertor

Created on: Wednesday, September 25, 2024 at 7:38:25 AM

Updated on: Friday, September 27, 2024 at 3:17:43 PM

Vector type: JS

Code used before fuzz:
const anchor = document.createElement('a');

Template used:

anchor.href="https://psres.net"+String.fromCodePoint($[i])+"@example.com";
if(anchor.host !== 'example.com'){
    log($[i])
}

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

anchor.href="https://psres.net"+String.fromCodePoint(35)+"@example.com";
if(anchor.host !== 'example.com'){
    alert(35)
}

anchor.href="https://psres.net"+String.fromCodePoint(47)+"@example.com";
if(anchor.host !== 'example.com'){
    alert(47)
}

anchor.href="https://psres.net"+String.fromCodePoint(63)+"@example.com";
if(anchor.host !== 'example.com'){
    alert(63)
}

anchor.href="https://psres.net"+String.fromCodePoint(92)+"@example.com";
if(anchor.host !== 'example.com'){
    alert(92)
}

Chrome 129.0.0.0 desktop macOS 10.15.7

Wed Sep 25 2024

Found 4 results

Show differences only?

Filter out alphanumeric

Dec	Hex	Chr
35	23	#

Dec	Hex	Chr
47	2f	/

Dec	Hex	Chr
63	3f	?

Dec	Hex	Chr
92	5c	\

Firefox 130.0 desktop macOS 10.15

Wed Sep 25 2024

Found 4 results

Show differences only?

Filter out alphanumeric

Dec	Hex	Chr
35	23	#

Dec	Hex	Chr
47	2f	/

Dec	Hex	Chr
63	3f	?

Dec	Hex	Chr
92	5c	\

Safari 18.0 desktop macOS 10.15.7

Wed Sep 25 2024

Found 4 results

Show differences only?

Filter out alphanumeric

Dec	Hex	Chr
35	23	#

Dec	Hex	Chr
47	2f	/

Dec	Hex	Chr
63	3f	?

Dec	Hex	Chr
92	5c	\