All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
All vectors
Categories
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
All vectors
Categories
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Transforming...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
5
5
5
5
Characters allowed in path traversal
joaxcar
8/26/2024
JS
0
32
32
32
32
Characters allowed before the JavaScript protocol
hackvertor
1/16/2025
XSS
0
2
2
2
2
Characters that act as attribute quotes
hackvertor
5/28/2024
XSS
0
2
2
2
2
Malformed HTML comments
hackvertor
1/17/2025
XSS
0
1
1
1
Characters allowed in colon entity
InsertScript
9/19/2024
XSS
0
⚠ Browser differences
45.4k
56.7k
45.4k
62.5k
Characters that cause the backslash to be consumed with a big5 charset
hackvertor
11/1/2024
XSS
0
⚠ Browser differences
63.4k
63.4k
63.4k
71
Characters urlencoded that get transformed when using the credentials part of the URL
hackvertor
9/24/2024
JS
0
108
108
108
108
Tags that get reordered in the DOM
hackvertor
1/21/2025
XSS
0
⚠ Browser differences
1.2k
921
1.2k
965
Window properties
hackvertor
5/31/2024
JS
0
25
25
25
25
Characters allowed before parentheses
hackvertor
3/31/2024
JS
0
3
3
3
3
Characters that can be inserted in the middle of the JS protocol name
cold-try
4/15/2024
XSS
0
2
2
2
2
Characters allowed after colon which result in an external URL
hackvertor
1/16/2025
XSS
0
1
1
1
Characters ending XML Processing Instructions (WIP)
ola456
2/4/2025
XSS
0
⚠ Browser differences
6
5
6
5
Tags that DO NOT support HTML comments
hackvertor
1/26/2025
XSS
0
1
1
1
Impossible lab frameset
renniepak
11/27/2024
HTML
0
⚠ Browser differences
4
3
4
HTML elements that inherit properties which return the full URL
0x999-x
11/14/2024
XSS
0
1
1
1
< removal bypass
Device1306
10/9/2024
HTML
0
5
5
5
5
Characters allowed as a class separator
hackvertor
4/13/2024
XSS
0
24
24
24
Characters that can be used in eval to write code in between
m-boll
5/12/2024
JS
0
1
1
1
Bypasses for __proto__ string match
vitorfhc
8/29/2024
JS
0
Found
245
records
Page 7 of 13
«
2
3
4
5
6
7
8
9
10
11
»