All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Reflecting...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
1
Character that closes HTML tag
InsertScript
4/2/2024
HTML
0
⚠ Browser differences
2.1k
1
2.1k
Chars in href that will not default to full URL
joaxcar
11/16/2024
XSS
0
1
1
1
1
Characters allowed to end a JS string
sqjor
7/17/2024
JS
0
1
1
1
1
Characters transformed when using lowercase
hackvertor
11/18/2024
JS
0
32
32
32
32
Characters that can precede the javascript protocol copy
rcbarnett
5/2/2024
XSS
0
2
2
2
2
HTML entities before JavaScript URL
hackvertor
6/25/2024
JS
0
25
25
25
25
Characters allowed between in operator
hackvertor
4/3/2024
JS
0
1
1
1
Impossible lab frameset
renniepak
11/27/2024
HTML
0
⚠ Browser differences
3
3
1
Characters allowed between slashes
hackvertor
4/8/2024
JS
0
⚠ Browser differences
24
16
24
Difference between browser-supported handlers and Shazzer 'events' list
hansmach1ne
1/5/2025
JS
0
1
1
1
Difference between browser-supported handlers and Shazzer 'all_browser_events' list
hansmach1ne
1/5/2025
JS
0
1
1
1
Mutated XSS with img onerror
sqjor
7/30/2024
XSS
0
⚠ Browser differences
299
299
299
47
Characters appended at the end of TLD within URL, which yield in the same host property
InsertScript
1/10/2025
JS
0
1
1
1
Characters that can be between < and script>
m10x
11/12/2024
HTML
0
26
26
26
26
Characters allowed after parentheses
hackvertor
4/1/2024
JS
0
4
4
4
4
Characters that can break out of a single line comment
0x999-x
4/10/2024
JS
0
16
16
16
16
JavaScript separators between function names
InsertScript
4/2/2024
JS
0
1
1
1
1
Characters that separate CSS properties
hackvertor
4/2/2024
HTML
0
25
25
25
25
Characters allowed before optional chaining
hackvertor
5/4/2024
JS
0
⚠ Browser differences
16
16
16
6
Entities allowed between function calls
hackvertor
6/29/2024
XSS
0
Found
272
records
Page 9 of 14
«
4
5
6
7
8
9
10
11
12
13
»