Characters that cause an external URL before @
4
4
4This vector shows what characters cause an external URL when used before an @
Created by: hackvertor
Created on: Wednesday, September 25, 2024 at 7:38:25 AM
Updated on: Tuesday, December 10, 2024 at 4:49:16 PM
Vector type: JS
Vector charset: UTF-8
Code used before fuzz:
const anchor = document.createElement('a');Template used:
anchor.href="https://psres.net"+String.fromCodePoint($[i])+"@example.com";
if(anchor.host !== 'example.com'){
log($[i])
}Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
anchor.href="https://psres.net"+String.fromCodePoint(35)+"@example.com";
if(anchor.host !== 'example.com'){
alert(35)
}anchor.href="https://psres.net"+String.fromCodePoint(47)+"@example.com";
if(anchor.host !== 'example.com'){
alert(47)
}anchor.href="https://psres.net"+String.fromCodePoint(63)+"@example.com";
if(anchor.host !== 'example.com'){
alert(63)
}anchor.href="https://psres.net"+String.fromCodePoint(92)+"@example.com";
if(anchor.host !== 'example.com'){
alert(92)
}Fuzz results
Firefox 130.0 desktop macOS 10.15
Updated
Wed Sep 25 2024
Found 4 results
Loading...
Safari 18.0 desktop macOS 10.15.7
Updated
Wed Sep 25 2024
Found 4 results
Loading...
Chrome 129.0.0.0 desktop macOS 10.15.7
Updated
Wed Sep 25 2024
Found 4 results
Loading...