Characters that cause an external URL before @
4
4
4
This vector shows what characters cause an external URL when used before an @
Created by: hackvertor
Created on: Wednesday, September 25, 2024 at 7:38:25 AM
Updated on: Friday, September 27, 2024 at 3:17:43 PM
Vector type: JS
Code used before fuzz:
const anchor = document.createElement('a');
Template used:
anchor.href="https://psres.net"+String.fromCodePoint($[i])+"@example.com";
if(anchor.host !== 'example.com'){
log($[i])
}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
anchor.href="https://psres.net"+String.fromCodePoint(35)+"@example.com";
if(anchor.host !== 'example.com'){
alert(35)
}
anchor.href="https://psres.net"+String.fromCodePoint(47)+"@example.com";
if(anchor.host !== 'example.com'){
alert(47)
}
anchor.href="https://psres.net"+String.fromCodePoint(63)+"@example.com";
if(anchor.host !== 'example.com'){
alert(63)
}
anchor.href="https://psres.net"+String.fromCodePoint(92)+"@example.com";
if(anchor.host !== 'example.com'){
alert(92)
}
Fuzz results
Firefox 130.0 desktop macOS 10.15
Updated
Wed Sep 25 2024
Found 4 results
Dec | Hex | Chr |
---|---|---|
35 | 23 | # |
Dec | Hex | Chr |
---|---|---|
47 | 2f | / |
Dec | Hex | Chr |
---|---|---|
63 | 3f | ? |
Dec | Hex | Chr |
---|---|---|
92 | 5c | \ |
Safari 18.0 desktop macOS 10.15.7
Updated
Wed Sep 25 2024
Found 4 results
Dec | Hex | Chr |
---|---|---|
35 | 23 | # |
Dec | Hex | Chr |
---|---|---|
47 | 2f | / |
Dec | Hex | Chr |
---|---|---|
63 | 3f | ? |
Dec | Hex | Chr |
---|---|---|
92 | 5c | \ |
Chrome 129.0.0.0 desktop macOS 10.15.7
Updated
Wed Sep 25 2024
Found 4 results
Dec | Hex | Chr |
---|---|---|
35 | 23 | # |
Dec | Hex | Chr |
---|---|---|
47 | 2f | / |
Dec | Hex | Chr |
---|---|---|
63 | 3f | ? |
Dec | Hex | Chr |
---|---|---|
92 | 5c | \ |