All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Leaking...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
Valid characters between function and dot-parenthesis .()
felipecaon
5/6/2024
JS
0
1
1
1
1
Characters to break out from eval string
m-boll
5/12/2024
JS
0
24
24
24
Characters that can be used in eval to write code in between
m-boll
5/12/2024
JS
0
7
7
7
7
Characters ignored in an attribute name
hackvertor
5/28/2024
XSS
0
2
2
2
2
Characters that act as attribute quotes
hackvertor
5/28/2024
XSS
0
⚠ Browser differences
74
75
74
75
Characters not urlencoded when using the credentials part of the URL
hackvertor
5/28/2024
JS
1
2
2
2
2
Characters that act as attribute quotes copy
freddyb
5/31/2024
XSS
0
⚠ Browser differences
1
1
1
965
Window properties
hackvertor
5/31/2024
JS
0
⚠ Browser differences
1
1
1
267
document properties
hackvertor
5/31/2024
JS
0
⚠ Browser differences
1
1
1
5
Properties that contain URLs
hackvertor
5/31/2024
JS
2
⚠ Browser differences
1
1
1
128
All events on window
hackvertor
5/31/2024
JS
1
⚠ Browser differences
1
1
1
79
All properties on navigator (two levels of nesting deep)
freddyb
6/6/2024
JS
0
1
1
1
1
Properties that leak the parent URL even when sandboxed
hackvertor
6/6/2024
JS
0
13
13
13
13
Properties are accessible in a sandboxed iframe
hackvertor
6/7/2024
JS
0
1
1
1
1
Properties that are accessible on location
hackvertor
6/7/2024
JS
0
⚠ Browser differences
3
1
3
1
Characters allowed at IPv6 but don't change the hostname
d0ge
6/10/2024
JS
1
⚠ Browser differences
1
1
312
314
Characters allowed at hostname
d0ge
6/11/2024
JS
1
25
25
25
25
Characters ignored in strings when doing a non strict comparison
hackvertor
6/18/2024
JS
0
1
1
1
1
Characters ignored after backslash with multiline string
hackvertor
6/18/2024
JS
0
1
1
1
characters allowed between exclamation mark and greater then
InsertScript
6/18/2024
HTML
0
Found
283
records
Page 4 of 15
«
1
2
3
4
5
6
7
8
9
10
»