Shazzer - Shared online fuzzing

- Home
- Login
- Vectors
- Help
- Home
- Login
- Vectors
- Help

Shazzer
Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes
Follow me on Twitter: @garethheyes

If you liked this, you may also like Hackvertor

New users

honeyb33z cristo31 cmarval roumy grumpinout1 Edr4 Toejam123 Gr4y-r0se MuzamilSheikh09 Atom-U lUcgryy PinkDraconian tiefps lcfr-eth Ko-kn3t Pegasus-E joseph-tawfik-ws Sjuuls OverflowMyBuffers yuebusao

Popular users

hackvertor (25)joaxcar (5)renniepak (4)albinowax (2)JorianWoltjer (2)0x999-x (2)d0ge (1)freddyb (1)ThomasOrlita (1)DreyAnd (1)K4r1it0 (1)securaji (1)InsertScript (1)koto (1)B-i-t-K (1)sqjor (1)ola456 (1)vitorfhc (1)weizman (1)avlidienbrunn (1)

New vectors

Characters that cause the backslash to be consumed with GBK charset Characters that can precede the javascript protocol copy2 Characters allowed javascript and colon copy2 copy2 Characters that close or encapsulate HTML attribute values XSS vectors that consume tag HTML tags and attributes that can be used to access the URL HTML tags that can clobber the credentials part of the URL Characters that cause the backslash to be consumed with a big5 charset Differences between escape vs encodeURIComponent < removal bypass Entities in-between square brackets that close cdata Characters in-between square brackets that close cdata Includes Validation Chars Allowed Characters that cause exceptions when URL encoded Characters allowed javascript and colon copy2 work HTML vector char not urlencoded (data+)domain values char not urlencoded (data)

Most popular

URL domain dot alternatives (721)DOM element relationships (656)Characters between < and element name (641)Characters that can precede the javascript protocol (599)Characters allowed between hostname and / but don't change the hostname (578)Characters allowed javascript and colon copy2 (568)JavaScript Scheme starting with https:// (505)characters allowed between exclamation mark and greater then (485)Character that closes HTML tag (463)Characters allowed javascript and colon (460)< removal bypass (459)Includes Validation Chars Allowed (420)All properties on navigator (two levels of nesting deep) (419)Characters allowed after hostname but don't change the hostname (388)work (375)HTML vector (362)char not urlencoded (data+) (356)Characters that can start an HTML comment (345)characters after slash that make a http protocol (340)char not urlencoded (data) (336)

Most liked

Characters allowed between hostname and / but don't change the hostname (4)JavaScript Scheme starting with https:// (4)URL domain dot alternatives (4)Entities that cause an external URL before @ (3)HTML entities that create ASCII characters inside a JavaScript URL (2)Characters allowed in-between operators (2)Characters that cause exceptions when URL encoded (2)HTML elements that are self closing or different text content (2)Characters allowed javascript and colon (2)Characters allowed after hostname but don't change the hostname (2)Characters that cause an external URL before @ (2)Properties that contain URLs (2)Characters that can precede the javascript protocol (2)HTML elements that parse differently when rendered (1)Entities allowed as JS variables (1)Characters that can break out of an inline style background-image url (1)ToUpperCase Improper Character Morphing (1)Characters between < and element name (1)Characters that can be used as valid labels in JavaScript (1)Characters allowed after optional chaining (1)