Clobbering...

CSS escapes that cause an external request with a forward slash

⚠ Browser differences

Tests which escapes cause an external request within a CSS URL scheme for background images.

Shazzer Master

Created byhackvertor

Created Aug 6, 2026

Updated Sep 8, 2026

Unable to render tweet button

Detecting browser...

CategoryCSS Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<div style="background:url(\$[hex2]/fuzz.shazzer.co.uk/$[rand]?$[hex2])">

Sample payloads

<div style="background:url(\00/fuzz.shazzer.co.uk/mr2y3wc3r1k?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/3tkiton6djc?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/bwxek8rmin?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/8qpmb84z?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/j3rrbil0xwi?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/evcr3seblg?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/6h0l5nbj5hf?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/d6rde37a2xv?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/ltvv4rw6cn?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/i9g09edmaa?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/ocsiz4veoyn?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/3dnlgv9wpmc?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/jhdpvmgaefa?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/uzsvozsbpx?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/nsacvm7qzkd?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/vbouidznif?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/ldrf64a8m1?00)">

<div style="background:url(\00/fuzz.shazzer.co.uk/5zryaheg5o?00)">