Shazzer logo

Characters transformed when using lowercase

Chrome logo 1
Firefox logo 1
Safari logo 1

This vector demonstrates which codePoints transform to ascii characters when using toLowerCase() Related vector: https://shazzer.co.uk/vectors/661713f26438aee019a61a71

Created by: hackvertor

Created on: Monday, November 18, 2024 at 6:08:31 PM

Updated on: Tuesday, May 27, 2025 at 8:12:49 AM


Category: XSS Execution

Vector visibility: Public

Vector type: JS

Vector charset: UTF-8

Template used:
let transformedChr = String.fromCodePoint($[i]).toLowerCase();0x0D
$[i] > 0x7f &&0x0D
/^\w+$/.test(transformedChr) &&0x0D
log($[i] + '=>' + transformedChr)
Detecting browser...

Sample payloads

let transformedChr = String.fromCodePoint(0).toLowerCase();0x0D
0 > 0x7f &&0x0D
/^\w+$/.test(transformedChr) &&0x0D
alert(0 + '=>' + transformedChr)

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Sat Jan 31 2026
Found 1 result
Loading...
Chrome logo
Chrome 143.0.0.0 desktop macOS 10.15.7older version

Updated

Sat Jan 31 2026
Found 1 result
Loading...
Firefox logo
Firefox 132.0 desktop macOS 10.15

Updated

Mon Nov 18 2024
Found 1 result
Loading...
Safari logo
Safari 18.0.1 mobile iOS 18.0.1

Updated

Mon Nov 18 2024
Found 1 result
Loading...
Safari logo
Safari 17.4 desktop macOS 10.15.7older version

Updated

Mon Nov 18 2024
Found 1 result
Loading...