All Vectors

Tokenizing...

	Vector name	User	Created	Type	Likes
6 6 6	ToUpperCase Improper Character Morphing	IDKdir	7/13/2024	JS	1
4 4 4 4	URL domain dot alternatives	JorianWoltjer	9/10/2024	JS	5
1 1 1 1	URL scheme separator alternatives	simoneonofri	11/14/2024	JS	1
1.4k 1.4k 1.4k 1.4k	Unicode "Latin" characters using \p{scx=Latin} RegEx	JorianWoltjer	12/5/2025	JS	0
12 12 12	Unicode characters that get normalized into path traversal characters	hackvertor	12/12/2024	JS	2
175 175 175 175	Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains	0x999-x	5/7/2025	XSS	1
⚠ Browser differences 1 1 1 280	Url parsing diff b/w anchor.href and new URL	Sudistark	5/26/2025	JS	0
1 1 1	Url parsing diff b/w window.open and new URL	Sudistark	2/21/2025	JS	0
⚠ Browser differences 48 48 48 32	Valid characters before domain 1	avlidienbrunn	4/10/2024	XSS	0
1 1 1	Valid characters between function and dot-parenthesis .()	felipecaon	5/6/2024	JS	0
25 25 25	Valid characters between function and parenthesis	felipecaon	5/6/2024	JS	0
25 25 25 25	Valid space characters in a regex	hackvertor	12/9/2025	JS	0
⚠ Browser differences 1.2k 987 1.2k 965	Window properties	hackvertor	5/31/2024	JS	0
9 9 9	XSS vectors that consume tag	Y4tacker	11/5/2024	XSS	1
⚠ Browser differences 7 8 7 5	XSS vectors that execute automatically	hackvertor	4/17/2024	XSS	0
1 1 1 1	XSS vectors that execute automatically inside math	hackvertor	4/17/2024	XSS	0
1 1 1 1	XSS vectors that execute automatically inside svg	hackvertor	4/17/2024	XSS	0
2 2 2	char not urlencoded (data)	nu11secur1ty	9/29/2024	JS	0
157 157 157	char not urlencoded (data+)	nu11secur1ty	9/29/2024	JS	0
⚠ Browser differences 1 2 1 2	characters after slash that make a http protocol	InsertScript	4/3/2024	XSS	0

Found 256 records

Page 12 of 13

4 5 6 7 8 9 10 11 12 13

All Vectors

Distributed Fuzzing

All Vectors