All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Probing...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
1
masato - braves parsing finding entity test
InsertScript
8/3/2025
XSS
1
1
1
1
1
masato - braves parsing finding valid characters
InsertScript
8/3/2025
XSS
1
1
1
1
1
masato - braves parsing finding valid attributes
InsertScript
8/3/2025
XSS
1
1
1
1
1
masato - braves parsing finding
InsertScript
8/3/2025
XSS
1
106
106
106
106
Named HTML entities that can be closed with !
avlidienbrunn
7/29/2025
XSS
2
1
1
1
1
Characters cause self closing tag
hackvertor
7/23/2025
XSS
0
2
2
2
2
Characters ignored following slash in self closing tag
hackvertor
7/23/2025
XSS
1
⚠ Browser differences
67
65
67
67
Characters allowed inside javascript protocol and still returns the hostname
RenwaX23
7/21/2025
JS
3
25
25
25
25
Characters allowed after a bigint
hackvertor
7/18/2025
JS
0
31
31
31
31
Characters allowed either side of a variable assignment
hackvertor
7/18/2025
JS
0
25
25
25
25
Characters allowed after throw statement
hackvertor
7/14/2025
JS
0
82
82
82
82
encodeURI() not encoded with %
forglockenspielexact
7/11/2025
JS
1
1.1M
65.4k
1.1M
65.4k
Characters encoded by escape()
JorianWoltjer
7/4/2025
JS
1
1.1M
63.4k
1.1M
63.4k
Characters encoded by encodeURI()
JorianWoltjer
7/4/2025
JS
1
1.1M
63.4k
1.1M
63.4k
Characters encoded by encodeURIComponent()
JorianWoltjer
7/4/2025
JS
1
1
1
1
1
Characters before custom tag
s3np41k1r1t0
6/23/2025
XSS
0
1
1
1
1
Injection in src attribute PORT, characters that change hostname
reindaelman
6/15/2025
JS
1
1
1
1
1
Characters appended at the end of PORT within URL, which yield a different HOST
reindaelman
6/15/2025
JS
0
⚠ Browser differences
1.1M
65.4k
1.1M
54k
Characters allowed as a tag name using DOM APIs
hackvertor
6/13/2025
JS
0
⚠ Browser differences
300
48
300
48
Characters allowed before host name that are ignored
hackvertor
6/11/2025
XSS
0
Found
268
records
Page 3 of 14
«
1
2
3
4
5
6
7
8
9
10
»