All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
What's new
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
What's new
Help
Enumerating...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Open fuzz launcher
Your browser automatically contributes to distributed fuzzing when idle. The launcher keeps fuzzing going while you use other tabs.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
3
3
3
3
ISO-2022-JP ASCII escape sequence
hackvertor
12/11/2024
XSS
1
4
4
4
Entities allowed between two forward slashes
InsertScript
9/19/2024
XSS
1
4
4
4
4
Characters that act as new lines in multi line strings
hackvertor
6/20/2024
JS
1
⚠ Browser differences
34
1
34
34
JIS X 0208 bytes that produce ASCII characters
JorianWoltjer
9/22/2024
JS
1
1
1
1
1
Characters between < and element name
ThomasOrlita
4/15/2024
HTML
1
577
577
577
577
Entities allowed as JS variables
hackvertor
7/2/2024
XSS
1
6
6
6
ToUpperCase Improper Character Morphing
IDKdir
7/13/2024
JS
1
40
40
40
40
JavaScript Scheme starting with http
BinaryScary
7/16/2024
JS
1
39
39
39
39
HTML tags that force HTML mode inside SVG
hackvertor
8/2/2024
XSS
1
9
9
9
9
XSS vectors that consume tag
Y4tacker
11/5/2024
XSS
1
7
7
7
7
Characters that close or encapsulate HTML attribute values
ola456
11/5/2024
XSS
1
1.1M
1.1M
1.1M
1.1M
Differences between escape vs encodeURIComponent
hackvertor
10/15/2024
JS
1
2
2
2
2
HTML tags that can clobber the credentials part of the URL
0x999-x
11/4/2024
XSS
1
2
2
2
Bytes that will normalize ISO-2022-JP
Cillian-Collins
12/26/2024
XSS
1
2
2
2
Bytes that will scramble ISO-2022-JP
Cillian-Collins
12/26/2024
XSS
1
89
89
89
89
Characters unencoded characters supported in the hash
hackvertor
9/24/2024
JS
1
29
29
29
29
Non-standard characters that break JSON.parse()
DreyAnd
11/15/2024
JS
1
34
34
34
34
Characters allowed before slashes which result in an external URL
hackvertor
1/16/2025
XSS
1
297
297
297
297
Characters allowed within a hostname but don't change the hostname
ThomasOrlita
4/30/2024
JS
1
1
1
1
Includes Validation Chars Allowed
Simpsonpt
10/8/2024
JS
1
Found
318
records
Page 13 of 16
«
7
8
9
10
11
12
13
14
15
16
»