Characters that cause an external URL before @

Firefox logo 4
Safari logo 4
Chrome logo 4

This vector shows what characters cause an external URL when used before an @

Created by: hackvertor

Created on: Wednesday, September 25, 2024 at 7:38:25 AM

Updated on: Friday, September 27, 2024 at 3:17:43 PM

Vector type: JS

Code used before fuzz:
const anchor = document.createElement('a');
Template used:
anchor.href="https://psres.net"+String.fromCodePoint($[i])+"@example.com";
if(anchor.host !== 'example.com'){
    log($[i])
}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

anchor.href="https://psres.net"+String.fromCodePoint(35)+"@example.com";
if(anchor.host !== 'example.com'){
    alert(35)
}
anchor.href="https://psres.net"+String.fromCodePoint(47)+"@example.com";
if(anchor.host !== 'example.com'){
    alert(47)
}
anchor.href="https://psres.net"+String.fromCodePoint(63)+"@example.com";
if(anchor.host !== 'example.com'){
    alert(63)
}
anchor.href="https://psres.net"+String.fromCodePoint(92)+"@example.com";
if(anchor.host !== 'example.com'){
    alert(92)
}

Fuzz results

Firefox logo
Firefox 130.0 desktop macOS 10.15

Updated

Wed Sep 25 2024
Found 4 results
DecHexChr
3523#
DecHexChr
472f/
DecHexChr
633f?
DecHexChr
925c\
Safari logo
Safari 18.0 desktop macOS 10.15.7

Updated

Wed Sep 25 2024
Found 4 results
DecHexChr
3523#
DecHexChr
472f/
DecHexChr
633f?
DecHexChr
925c\
Chrome logo
Chrome 129.0.0.0 desktop macOS 10.15.7

Updated

Wed Sep 25 2024
Found 4 results
DecHexChr
3523#
DecHexChr
472f/
DecHexChr
633f?
DecHexChr
925c\