All VectorsVector nameUser Created Type Likes 1.1kMutated XSS AttributesIDKdir7/13/2024XSS0React DOM srcIDKdir7/15/2024JS0 1 1 1Characters allowed to end a JS stringsqjor7/17/2024JS0 11 11 11Tags that cause child tags not to be found in the DOMhackvertor7/18/2024HTML0Find WAF bypass for eval contextelieehel11/22/2024JS0Mutated XSS with img onerrorsqjor7/30/2024XSS0 6Characters that can work as attribute seperatorSudistark8/17/2024JS0 70 71 71Characters urlencoded that get transformed when using the credentials part of the URLhackvertor9/24/2024JS0Chars allowed before domaint0xodile9/24/2024XSS0 65.5kdomain valuesnu11secur1ty9/29/2024JS0 1 1< removal bypassDevice130610/9/2024HTML0 56.7k 62.4k 45.4kCharacters that cause the backslash to be consumed with a big5 charsethackvertor11/1/2024XSS0 2.1kChars in href that will not default to full URLjoaxcar11/16/2024XSS0 1 1 1Characters transformed when using lowercasehackvertor11/18/2024JS0Impossible lab framesetrenniepak11/27/2024HTML0 20Difference between browser-supported handlers and Shazzer 'events' listhansmach1ne1/5/2025JS0Found 236 recordsPage 12 of 12«3456789101112