Shazzer - Shared online fuzzing

- Home
- Vectors
- Stats
  - Performance
  - Features
  - Differences
  - Releases
- Network
- Tools
  - Cheat sheet
  - Unicode table
- Blog
  - Blog home
  - RSS
- What's new
- Help

Hijacking...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Url parsing diff b/w anchor.href and new URL
Supported HTML and attributes by the Sanitizer
Characters appended at the end of PORT within URL, which yield a different HOST
masato - braves parsing finding entity test
masato - braves parsing finding valid attributes
masato - braves parsing finding
All properties on navigator (two levels of nesting deep)
document properties
Window properties
Tags that consume markup but select consumes them
HTML sanitizer support
Characters allowed before onerror events
characters after slash that make a http protocol
Tags that stop style
Characters allowed javascript and colon
framers event executors
Characters allowed in-between hyphens
Characters that can be inserted in the middle of the JS protocol name
Characters allowed between an object and the dot operator
Characters between < and element name

New collections

Fetch with protocol relative URLs
CSS the bomb inside your inbox
Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

HTML sanitizer support
Tags that consume markup but select consumes them
Characters after protocol relative slashes in fetch()
Characters in-between protocol relative URLs in fetch()
Characters before protocol relative URLs in fetch()
Script tag closing characters
Attribute separators
CSS random function
Before URL protocol relative characters
Characters before CSS property values

Most Popular

URL domain dot alternatives(9.3k)
Characters allowed javascript and colon(8k)
JavaScript Scheme starting with https://(7.4k)
Characters between < and element name(6.9k)
Characters allowed between hostname and / but don't change the hostname(6.4k)
HTML entities that create ASCII characters inside a JavaScript URL(6.3k)
DOM element relationships(6.2k)
Characters that can precede the javascript protocol(6.1k)
characters allowed between exclamation mark and greater then (5.8k)
Entities that cause an external URL before @(5.7k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle. The launcher keeps fuzzing going while you use other tabs.

Shazzer - Shared online fuzzing