All VectorsVector nameUser Created Type Likes 4 4 4 4URL domain dot alternativesJorianWoltjer9/10/2024JS5 50 50 50 50HTML entities that create ASCII characters inside a JavaScript URLhackvertor6/25/2024JS4 4 4 4 4Entities that cause an external URL before @hackvertor9/25/2024XSS4⚠ Browser differences 50 50 50 302Characters allowed between hostname and / but don't change the hostnameThomasOrlita4/15/2024JS4 5 5 5Characters allowed between multiple HTML attributesJorianWoltjer9/12/2024XSS4 1 1 1JavaScript Scheme starting with https://BinaryScary6/28/2024JS4 3 3 3 3Characters allowed javascript and colonrenniepak4/9/2024JS3 4 4 4 4Characters that cause an external URL before @hackvertor9/25/2024JS3⚠ Browser differences 67 65 67 67Characters allowed inside javascript protocol and still returns the hostnameRenwaX237/21/2025JS3 7 7 7 7Characters allowed while closing script tagAyushXtha10/27/2025XSS3 32 32 32 32Characters that can precede the javascript protocolrenniepak4/10/2024XSS3 5 5 5 5Properties that contain URLshackvertor5/31/2024JS2 25 25 25 25Characters allowed after optional chaininghackvertor5/4/2024JS2⚠ Browser differences 49k 49k 49k 49kCharacters that can be used as valid labels in JavaScripthackvertor4/30/2024JS2 15 15 15 15HTML elements that are self closing or different text contenthackvertor4/19/2024XSS2 47 47 47Characters appended at the end of TLD within URL, which yield in the same Originhansmach1ne1/5/2025JS2 12 12 12Unicode characters that get normalized into path traversal characters hackvertor12/12/2024JS2 2k 2k 2k 2kCharacters that cause exceptions when URL encodedhackvertor10/3/2024JS2 3 3 3 3Characters that can start an HTML comment0x999-x7/18/2024HTML2 25 25 25 25Characters allowed in-between operatorshackvertor4/14/2024JS2Found 248 recordsPage 1 of 1312345678910»
