All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Splicing...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
2
2
2
char not urlencoded (data)
nu11secur1ty
9/29/2024
JS
0
157
157
157
char not urlencoded (data+)
nu11secur1ty
9/29/2024
JS
0
⚠ Browser differences
2
2
1
2
characters after slash that make a http protocol
InsertScript
4/3/2024
XSS
0
1
1
1
characters allowed between exclamation mark and greater then
InsertScript
6/18/2024
HTML
0
25
25
25
25
characters between function name and parentheses
InsertScript
11/3/2025
JS
0
1
1
1
1
chars before img tags
t0xodile
10/25/2025
XSS
0
⚠ Browser differences
1
1
1
267
document properties
hackvertor
5/31/2024
JS
0
1
1
1
domain values
nu11secur1ty
9/29/2024
JS
0
1
1
1
1
dsqd
NikolaT3esla
10/1/2025
HTML
0
82
82
82
82
encodeURI() not encoded with %
forglockenspielexact
7/11/2025
JS
1
A
18.6ms
B
24.5ms
A
13.0ms
B
112.0ms
A
25.2ms
B
32.0ms
A
9.0ms
B
32.0ms
for loop vs forEach
hackvertor
7/3/2026
PERF
0
⚠ Browser differences
2
4
2
framers event executors
weizman
4/10/2024
XSS
0
A
18.1ms
B
16.8ms
A
8.0ms
B
8.0ms
A
26.3ms
B
26.3ms
A
4.0ms
B
5.0ms
indexOf vs includes
hackvertor
7/4/2026
PERF
0
1
1
1
1
mamad
amirjoudak
6/2/2026
JS
0
1
1
1
1
masato - braves parsing finding
InsertScript
8/3/2025
XSS
1
1
1
1
1
masato - braves parsing finding entity test
InsertScript
8/3/2025
XSS
1
1
1
1
1
masato - braves parsing finding valid attributes
InsertScript
8/3/2025
XSS
1
1
1
1
1
masato - braves parsing finding valid characters
InsertScript
8/3/2025
XSS
1
2
2
2
2
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Rhynorater
3/28/2026
JS
0
15.1ms
1.0ms
17.2ms
20.0ms
startsWith performance
hackvertor
7/4/2026
PERF
0
Found
283
records
Page 14 of 15
«
6
7
8
9
10
11
12
13
14
15
»
