All Vectors

Spraying...

	Vector name	User	Created	Type	Likes
2 2 2	Bytes that will normalize ISO-2022-JP	Cillian-Collins	12/26/2024	XSS	1
2 2 2	Bytes that will scramble ISO-2022-JP	Cillian-Collins	12/26/2024	XSS	1
89 89 89 89	Characters unencoded characters supported in the hash	hackvertor	9/24/2024	JS	1
34 34 34 34	Characters allowed before slashes which result in an external URL	hackvertor	1/16/2025	XSS	1
29 29 29 29	Non-standard characters that break JSON.parse()	DreyAnd	11/15/2024	JS	1
⚠ Browser differences 297 297 45 29	Characters allowed within a hostname but don't change the hostname	ThomasOrlita	4/30/2024	JS	1
1 1 1	Includes Validation Chars Allowed	Simpsonpt	10/8/2024	JS	1
1 1 1	Entities in-between square brackets that close cdata	hackvertor	10/8/2024	XSS	1
19 19 19	HTML tags and attributes that can be used to access the URL	0x999-x	11/4/2024	XSS	1
1 1 1	Chars that can be used as opening bracket in innerHTML	nollium	4/19/2025	JS	1
⚠ Browser differences 187 187 187 1	Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains	0x999-x	5/7/2025	XSS	1
⚠ Browser differences 30 30 1	Characters allowed after equals sign for event	YouGina	12/17/2024	XSS	1
1 1 1 1	Injection in src attribute PORT, characters that change hostname	reindaelman	6/15/2025	JS	1
⚠ Browser differences 1.1M 1.1M 1.1M 1	Characters encoded by encodeURIComponent()	JorianWoltjer	7/4/2025	JS	1
8 8 8 8	Consuming tags	hackvertor	4/8/2024	HTML	1
25 25 25	Loose comparison, characters appended which still result in type coercion	hansmach1ne	1/6/2025	JS	1
⚠ Browser differences 1.1M 1.1M 1.1M 1	Characters encoded by encodeURI()	JorianWoltjer	7/4/2025	JS	1
⚠ Browser differences 1.1M 1.1M 1.1M 1	Characters encoded by escape()	JorianWoltjer	7/4/2025	JS	1
82 82 82 82	encodeURI() not encoded with %	forglockenspielexact	7/11/2025	JS	1
1 1 1 1	Characters allowed in-between hyphens	hackvertor	4/14/2024	XSS	1

Found 303 records

Page 13 of 16

7 8 9 10 11 12 13 14 15 16

All Vectors

Distributed Fuzzing

All Vectors