Shazzer

Wrangling...

Shared online fuzzer

Fuzzing browsers since 2012

URL domain dot alternatives(6.5k)
Characters allowed javascript and colon(6.3k)
JavaScript Scheme starting with https://(6.2k)
Characters allowed between hostname and / but don't change the hostname(5.3k)
Characters between < and element name(5.3k)
Characters that can precede the javascript protocol(5.1k)
DOM element relationships(5.1k)
HTML entities that create ASCII characters inside a JavaScript URL(4.7k)
characters allowed between exclamation mark and greater then (4.6k)
Characters allowed javascript and colon copy2(4.5k)
< removal bypass(4.2k)
Characters appended at the end of TLD within URL, which yield in the same Origin(3.8k)
Characters that close or encapsulate HTML attribute values(3.7k)
Character that closes HTML tag(3.7k)
Characters that cause exceptions when URL encoded(3.7k)
Entities that cause an external URL before @(3.6k)
Unicode characters that get normalized into path traversal characters (3.5k)
Characters allowed between multiple HTML attributes(3.4k)
Characters allowed after hostname but don't change the hostname(3.4k)
Includes Validation Chars Allowed(3.4k)

URL domain dot alternatives(5)
Entities that cause an external URL before @(4)
Characters allowed between multiple HTML attributes(4)
Characters allowed between hostname and / but don't change the hostname(4)
JavaScript Scheme starting with https://(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Characters allowed javascript and colon(3)
Characters that can precede the javascript protocol(3)
Characters allowed while closing script tag(3)
Characters allowed inside javascript protocol and still returns the hostname(3)
Characters that cause an external URL before @(3)
Characters allowed after optional chaining(2)
HTML elements that are self closing or different text content(2)
Characters allowed after hostname but don't change the hostname(2)
Unicode characters that get normalized into path traversal characters (2)
Characters that can be used as valid labels in JavaScript(2)
Characters that cause exceptions when URL encoded(2)
Characters that can start an HTML comment(2)
Characters appended at the end of TLD within URL, which yield in the same Origin(2)
Characters allowed in-between operators(2)

disconnected

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.