NewShazzer now has an MCP server. Let Claude search, create and fuzz your vectors from Claude Desktop or Claude Code.Get an API key What's new

Symbolizing...

SVG elements & attributes that make external requests

⚠ Browser differences

This vector demonstrates how to test external URLs using the new URL fuzzing placeholders. It enumerates every SVG tag & attribute and logs if a request was made.

Shazzer Master

Created byhackvertor

Created Aug 6, 2026

Updated Sep 5, 2026

Unable to render tweet button

RSS

Detecting browser...

CategoryURL Handling

VisibilityPublic

TypeXSS

CharsetUTF-8

$[data1] placeholdersvg

$[data2] placeholdersvg_attributes

Template used:

<svg><$[data1] $[data2]="https://fuzz.shazzer.co.uk/$[rand]?$[data1]->$[data2]" />

Sample payloads

<svg><feImage->href ="https://fuzz.shazzer.co.uk/9vszign5mrp?feImage->href->" />

<svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/z8uadd9m7gp?feImage->xlink:href->" />

<svg><image->href ="https://fuzz.shazzer.co.uk/fkwunz43g5?image->href->" />

<svg><image->xlink:href ="https://fuzz.shazzer.co.uk/nvya2bxsvl?image->xlink:href->" />

<svg><script->href ="https://fuzz.shazzer.co.uk/zhulbd917iq?script->href->" />

<svg><script->xlink:href ="https://fuzz.shazzer.co.uk/auuwcirok1i?script->xlink:href->" />

<svg><feImage->href ="https://fuzz.shazzer.co.uk/z0i9krrb6a?feImage->href->" />

<svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/oqdybpjqpjc?feImage->xlink:href->" />

<svg><image->href ="https://fuzz.shazzer.co.uk/3vnxt8fl7cb?image->href->" />

<svg><image->xlink:href ="https://fuzz.shazzer.co.uk/353rnkuf8vo?image->xlink:href->" />

<svg><script->href ="https://fuzz.shazzer.co.uk/rljl8ywj6z?script->href->" />

<svg><script->xlink:href ="https://fuzz.shazzer.co.uk/6lnc6akl05s?script->xlink:href->" />

<svg><feImage->href ="https://fuzz.shazzer.co.uk/znxzsniyp7?feImage->href->" />

<svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/aa8dgclv66w?feImage->xlink:href->" />

<svg><image->href ="https://fuzz.shazzer.co.uk/rrwuhvypyjo?image->href->" />

<svg><image->xlink:href ="https://fuzz.shazzer.co.uk/ex96au16m2?image->xlink:href->" />

<svg><script->href ="https://fuzz.shazzer.co.uk/pt84p07ljmj?script->href->" />

<svg><script->xlink:href ="https://fuzz.shazzer.co.uk/y9woo9xr18a?script->xlink:href->" />

<svg><feImage->href ="https://fuzz.shazzer.co.uk/jg3bwmqdw0r?feImage->href->" />

<svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/r7svqymfzvd?feImage->xlink:href->" />

Distributed Fuzzing

SVG elements & attributes that make external requests

Sample payloads

Fuzz results