- Home
- Vectors
- Stats
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Stats
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Shazzing...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

Characters Supported in </script> Tags
Characters allowed in between start of HTML tag name and event handler
Valid space characters in a regex
Characters allowed before event handler
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Entities in-between protocol-relative URL
Entities after protocol-relative URL
Entities before protocol-relative URL
Supported HTML and events by the Sanitizer
JavaScript URLs allowed by the Sanitizer
Supported HTML and attributes by the Sanitizer
Characters matching URLPattern capture group
Characters that cause the backslash to be consumed with a big5 charset
Characters allowed in the protocol that still resolve host name
Characters between element name and >
JavaScript separators between function names
Characters allowed after parentheses
Characters allowed before parentheses
Characters allowed javascript and colon copy2
Characters allowed before the JavaScript protocol

New collections

Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

JavaScript URLs allowed by the Sanitizer
Supported HTML and events by the Sanitizer
Supported HTML and attributes by the Sanitizer
String concat vs array join
CSS container queries
CSS :is() selector
indexOf vs includes
startsWith performance
startsWith vs regex
CSS :has() selector

Most Popular

URL domain dot alternatives(7.9k)
Characters allowed javascript and colon(7.3k)
JavaScript Scheme starting with https://(7k)
Characters allowed between hostname and / but don't change the hostname(6.1k)
Characters between < and element name(5.9k)
HTML entities that create ASCII characters inside a JavaScript URL(5.9k)
DOM element relationships(5.8k)
Characters that can precede the javascript protocol(5.8k)
characters allowed between exclamation mark and greater then (5.2k)
Characters allowed javascript and colon copy2(5.1k)

Most Liked

URL domain dot alternatives(5)
Entities that cause an external URL before @(4)
Characters allowed between hostname and / but don't change the hostname(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between multiple HTML attributes(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Characters that can precede the javascript protocol(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Vector categories

Character Encoding

JavaScript Syntax

Regular Expressions