6
6
6
8This vector demonstrates how to test external URLs using the new URL fuzzing placeholders. It enumerates every SVG tag & attribute and logs if a request was made.
<svg><$[data1] $[data2]="https://fuzz.shazzer.co.uk/$[rand]?$[data1]->$[data2]" /><svg><feImage->href ="https://fuzz.shazzer.co.uk/y106ps6a9c?feImage->href->" /><svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/f0mbdvrpi8h?feImage->xlink:href->" /><svg><image->href ="https://fuzz.shazzer.co.uk/56p6gc0frgq?image->href->" /><svg><image->xlink:href ="https://fuzz.shazzer.co.uk/yv9l7bzkw98?image->xlink:href->" /><svg><script->href ="https://fuzz.shazzer.co.uk/1osj8im8q14?script->href->" /><svg><script->xlink:href ="https://fuzz.shazzer.co.uk/ma0zfbgfqem?script->xlink:href->" /><svg><feImage->href ="https://fuzz.shazzer.co.uk/jgeetavueha?feImage->href->" /><svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/o21fgpk5iw?feImage->xlink:href->" /><svg><image->href ="https://fuzz.shazzer.co.uk/vfgoovfwuxr?image->href->" /><svg><image->xlink:href ="https://fuzz.shazzer.co.uk/2i32rcte4u9?image->xlink:href->" /><svg><script->href ="https://fuzz.shazzer.co.uk/1xxiz1axsad?script->href->" /><svg><script->xlink:href ="https://fuzz.shazzer.co.uk/h7tti0wg9e?script->xlink:href->" /><svg><feImage->href ="https://fuzz.shazzer.co.uk/s99ubrml8ok?feImage->href->" /><svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/2t8337ae6wr?feImage->xlink:href->" /><svg><image->href ="https://fuzz.shazzer.co.uk/mzej4t3107m?image->href->" /><svg><image->xlink:href ="https://fuzz.shazzer.co.uk/ijyc0990jal?image->xlink:href->" /><svg><script->href ="https://fuzz.shazzer.co.uk/nos91oi6x7g?script->href->" /><svg><script->xlink:href ="https://fuzz.shazzer.co.uk/bqzgs72mqp?script->xlink:href->" /><svg><feImage->href ="https://fuzz.shazzer.co.uk/zyvt667dru?feImage->href->" /><svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/g7edy2k44wj?feImage->xlink:href->" />