All Vectors

Bruteforcing...

	Vector name	User	Created	Type
102 102 102 102	Characters that change length on .toUpperCase()	ThomasOrlita	4/15/2024	JS
19 19 19 19	Entities allowed before function calls	hackvertor	7/2/2024	XSS
35 35 35 35	Entities still parsed in uppercase	hackvertor	7/2/2024	JS
⚠ Browser differences 1 1 1 280	Url parsing diff b/w anchor.href and new URL	Sudistark	5/26/2025	JS
29 29 29 29	Characters allowed after the void operator	hackvertor	4/30/2024	JS
⚠ Browser differences 15 15 15 9	Entities allowed inside host	hackvertor	7/6/2024	JS
1 1 1	Valid characters between function and dot-parenthesis .()	felipecaon	5/6/2024	JS
6 6 6	Allowed characters right after tag name & before tag closure, no other characters in between	hansmach1ne	1/9/2025	XSS
2 2 2 2	Characters that act as attribute quotes copy	freddyb	5/31/2024	XSS
1 1 1	Quotes	dogspyagent	7/13/2024	XSS
1 1 1	Entities allowed inside function name	hackvertor	7/2/2024	XSS
31 31 31 31	Characters allowed either side of a variable assignment	hackvertor	7/18/2025	JS
7 7 7 7	Closing title tag name separators	ola456	9/15/2025	XSS
1 1 1 1	Characters cause self closing tag	hackvertor	7/23/2025	XSS
⚠ Browser differences 117 117 117 118	Tags that support HTML comments	hackvertor	1/26/2025	XSS
300 300 300 300	Characters allowed after slashes which result in an external URL	hackvertor	1/16/2025	XSS
1 1 1	Characters prepended to URL host. check if difference between URL and a tag	InsertScript	1/10/2025	JS
6 6 6	Characters allowed before onerror events	hackvertor	3/30/2024	XSS
1 1 1 1	XSS vectors that execute automatically inside math	hackvertor	4/17/2024	XSS
10 10 10 10	Entities that are normalized for e	hackvertor	7/12/2024	JS

Found 318 records

Page 8 of 16

3 4 5 6 7 8 9 10 11 12

All Vectors

Distributed Fuzzing

All Vectors