All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Scanning...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
5
5
5
5
Characters allowed in path traversal
joaxcar
8/26/2024
JS
0
68
68
68
68
Characters allowed in the protocol that still resolve host name
hackvertor
5/6/2025
JS
0
1
1
1
1
Characters allowed in-between hyphens
hackvertor
4/14/2024
XSS
1
25
25
25
25
Characters allowed in-between operators
hackvertor
4/14/2024
JS
2
⚠ Browser differences
67
65
67
67
Characters allowed inside javascript protocol and still returns the hostname
RenwaX23
7/21/2025
JS
3
1
1
1
Characters allowed instead of equal sign
c3l3si4n
4/28/2024
XSS
0
3
3
3
3
Characters allowed javascript and colon
renniepak
4/9/2024
JS
4
4
4
4
4
Characters allowed javascript and colon copy2
avlidienbrunn
9/29/2024
JS
0
1
1
1
Characters allowed to break double quotes
p3n7a90n
6/30/2024
XSS
0
1
1
1
1
Characters allowed to end a JS string
sqjor
7/17/2024
JS
0
7
7
7
7
Characters allowed while closing script tag
AyushXtha
10/27/2025
XSS
3
297
297
297
297
Characters allowed within a hostname but don't change the hostname
ThomasOrlita
4/30/2024
JS
1
1
1
1
1
Characters appended at the end of PORT within URL, which yield a different HOST
reindaelman
6/15/2025
JS
0
299
299
299
299
Characters appended at the end of TLD within URL, which yield in the same Origin
hansmach1ne
1/5/2025
JS
3
299
299
299
299
Characters appended at the end of TLD within URL, which yield in the same host property
InsertScript
1/10/2025
JS
0
⚠ Browser differences
4
1
4
4
Characters before @ in a URL constructor host
hackvertor
6/22/2026
JS
0
⚠ Browser differences
6
7
6
6
Characters before CSS property names
hackvertor
8/6/2026
XSS
0
6
6
6
6
Characters before CSS property values
hackvertor
8/25/2026
XSS
0
6
6
6
6
Characters before a CSS background url function
hackvertor
8/6/2026
XSS
0
1
1
1
1
Characters before custom tag
s3np41k1r1t0
6/23/2025
XSS
0
Found
314
records
Page 5 of 16
«
1
2
3
4
5
6
7
8
9
10
»