Shazzer logo

Impossible lab frameset

Chrome logo 1
Firefox logo 1
Edge logo 1

It occurs within a frameset but before a body tag with equals filtered. You would think you could inject a closing frameset followed by a script block but that would be too easy.

renniepak
Created byrenniepak
Created Nov 27, 2024
Updated May 27, 2025

Tweet
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeHTML
CharsetUTF-8
$[data1] placeholderhtml
$[data2] placeholderhtml
Template used:
0x0D
<!doctype HTML>0x0D
<html>0x0D
<head>0x0D
<title>After Frameset when exists before body and no equals</title>0x0D
<frameset></$[data1]>0x0D
<found><$[data2]></frameset>0x0D
</body>0x0D
</html>

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop macOS 10.15.7
Updated28 Jan 2026
Found 1 result
Loading...
Firefox logo
Firefox 147.0 desktop Linux
Updated1 Feb 2026
Found 1 result
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated30 Jan 2026
Found 1 result
Loading...