All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Escaping...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
⚠ Browser differences
2k
2
2k
1
Characters after https URI scheme which prevent URL parsing of href
Cillian-Collins
10/27/2025
XSS
1
16
16
16
16
Characters after strings
hackvertor
4/3/2024
JS
0
1
1
1
1
Characters allowed after * in CSS comments
hackvertor
3/31/2024
HTML
0
25
25
25
25
Characters allowed after a bigint
hackvertor
7/18/2025
JS
0
2
2
2
2
Characters allowed after colon which result in an external URL
hackvertor
1/16/2025
XSS
0
⚠ Browser differences
30
30
1
Characters allowed after equals sign for event
YouGina
12/17/2024
XSS
1
31
31
31
31
Characters allowed after greater than in events
hackvertor
6/21/2024
XSS
0
⚠ Browser differences
332
332
332
64
Characters allowed after hostname but don't change the hostname
ThomasOrlita
4/15/2024
JS
2
31
31
31
31
Characters allowed after malformed entities
hackvertor
7/1/2024
XSS
1
25
25
25
25
Characters allowed after optional chaining
hackvertor
5/4/2024
JS
2
26
26
26
26
Characters allowed after parentheses
hackvertor
4/1/2024
JS
0
⚠ Browser differences
300
300
300
32
Characters allowed after slashes which result in an external URL
hackvertor
1/16/2025
XSS
0
29
29
29
29
Characters allowed after the void operator
hackvertor
4/30/2024
JS
0
25
25
25
25
Characters allowed after throw statement
hackvertor
7/14/2025
JS
0
5
5
5
5
Characters allowed as a class separator
hackvertor
4/13/2024
XSS
0
⚠ Browser differences
1.1M
65.4k
1.1M
54k
Characters allowed as a tag name using DOM APIs
hackvertor
6/13/2025
JS
0
53
53
53
53
Characters allowed as start of HTML tag name
JorianWoltjer
1/30/2026
XSS
1
⚠ Browser differences
3
1
3
1
Characters allowed at IPv6 but don't change the hostname
d0ge
6/10/2024
JS
1
⚠ Browser differences
1
312
312
314
Characters allowed at hostname
d0ge
6/11/2024
JS
1
⚠ Browser differences
5
5
1
5
Characters allowed before CSS selectors
hackvertor
7/15/2024
XSS
0
Found
283
records
Page 2 of 15
«
1
2
3
4
5
6
7
8
9
10
»