Characters appended at the end of PORT within URL, which yield a different HOST

Chrome logo 15

Characters appended at the end of PORT within URL, which yield a different HOST This is just a simple modification of another fuzzing vector by hansmachine

Created by: reindaelman

Created on: Sunday, June 15, 2025 at 5:57:51 PM

Updated on: Sunday, June 15, 2025 at 6:01:42 PM


Vector type: JS

Vector charset: UTF-8

Template used:
if (new URL("https://google.com:1$[chr]$[chr]/endpoint").hostname!="google.com"){log($[i])}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

if (new URL("https://google.com:1		/endpoint").hostname!="google.com"){alert(9)}
if (new URL("https://google.com:1##/endpoint").hostname!="google.com"){alert(35)}
if (new URL("https://google.com:1///endpoint").hostname!="google.com"){alert(47)}
if (new URL("https://google.com:100/endpoint").hostname!="google.com"){alert(48)}
if (new URL("https://google.com:111/endpoint").hostname!="google.com"){alert(49)}
if (new URL("https://google.com:122/endpoint").hostname!="google.com"){alert(50)}
if (new URL("https://google.com:133/endpoint").hostname!="google.com"){alert(51)}
if (new URL("https://google.com:144/endpoint").hostname!="google.com"){alert(52)}
if (new URL("https://google.com:155/endpoint").hostname!="google.com"){alert(53)}
if (new URL("https://google.com:166/endpoint").hostname!="google.com"){alert(54)}
if (new URL("https://google.com:177/endpoint").hostname!="google.com"){alert(55)}
if (new URL("https://google.com:188/endpoint").hostname!="google.com"){alert(56)}
if (new URL("https://google.com:199/endpoint").hostname!="google.com"){alert(57)}
if (new URL("https://google.com:1??/endpoint").hostname!="google.com"){alert(63)}
if (new URL("https://google.com:1\\/endpoint").hostname!="google.com"){alert(92)}

Fuzz results

Chrome logo
Chrome 137.0.0.0 desktop macOS 10.15.7

Updated

Sun Jun 15 2025
Found 15 results
Loading...