Hoisting...

SVG elements & attributes that make external requests

⚠ Browser differences

This vector demonstrates how to test external URLs using the new URL fuzzing placeholders. It enumerates every SVG tag & attribute and logs if a request was made.

Shazzer Master

Created byhackvertor

Created Aug 6, 2026

Updated Sep 5, 2026

Unable to render tweet button

Detecting browser...

CategoryURL Handling

VisibilityPublic

TypeXSS

CharsetUTF-8

$[data1] placeholdersvg

$[data2] placeholdersvg_attributes

Template used:

<svg><$[data1] $[data2]="https://fuzz.shazzer.co.uk/$[rand]?$[data1]->$[data2]" />

Sample payloads

<svg><feImage->href ="https://fuzz.shazzer.co.uk/llbjvmxitqb?feImage->href->" />

<svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/5qnj96ypper?feImage->xlink:href->" />

<svg><image->href ="https://fuzz.shazzer.co.uk/9uyq1z784rk?image->href->" />

<svg><image->xlink:href ="https://fuzz.shazzer.co.uk/dyyqt4hyye?image->xlink:href->" />

<svg><script->href ="https://fuzz.shazzer.co.uk/xurw31ycb6s?script->href->" />

<svg><script->xlink:href ="https://fuzz.shazzer.co.uk/imn546i3zup?script->xlink:href->" />

<svg><feImage->href ="https://fuzz.shazzer.co.uk/14k7zk1qvvo?feImage->href->" />

<svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/kt1q4nkkmpb?feImage->xlink:href->" />

<svg><image->href ="https://fuzz.shazzer.co.uk/9o4o8ubf76?image->href->" />

<svg><image->xlink:href ="https://fuzz.shazzer.co.uk/vj6hd8ujqa?image->xlink:href->" />

<svg><script->href ="https://fuzz.shazzer.co.uk/86r3z0yv8hh?script->href->" />

<svg><script->xlink:href ="https://fuzz.shazzer.co.uk/oqpp2nmqad?script->xlink:href->" />

<svg><feImage->href ="https://fuzz.shazzer.co.uk/a3mha8hjynf?feImage->href->" />

<svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/6vq8a4lf2d3?feImage->xlink:href->" />

<svg><image->href ="https://fuzz.shazzer.co.uk/piilknhpb3c?image->href->" />

<svg><image->xlink:href ="https://fuzz.shazzer.co.uk/r7g2qle4bx?image->xlink:href->" />

<svg><script->href ="https://fuzz.shazzer.co.uk/y8uqeiisse?script->href->" />

<svg><script->xlink:href ="https://fuzz.shazzer.co.uk/yozun9bb6cb?script->xlink:href->" />

<svg><feImage->href ="https://fuzz.shazzer.co.uk/evjnb2mhz8?feImage->href->" />

<svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/g28f7fg15t6?feImage->xlink:href->" />