Scheme slash alternatives in URL() when a base is used
Characters that cause URL() to treat the provided url as a relative url when a base is used, and as an absolute url when no base is used. Based on the writeup: https://blog.vitorfalcao.com/posts/intigriti-0525-writeup/#checks-vs-usage-a-subtle-difference
Created by: N25sec
Created on: Thursday, May 22, 2025 at 9:03:44 AM
Updated on: Thursday, May 22, 2025 at 12:00:30 PM
Vector type: JS
Vector charset: UTF-8
Template used:
(new URL("https:" + String.fromCodePoint($[i]) + "example.com","https://shazzer.co.uk").origin === new URL("https://shazzer.co.uk").origin) && (new URL("https:" + String.fromCodePoint($[i]) + "example.com").origin === new URL("https://example.com").origin) && log($[i] + " >> " + String.fromCodePoint($[i]))
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Fuzz results
No results found.