All VectorsVector nameUser Created Type Likes 9 9XSS vectors that consume tagY4tacker11/5/2024XSS1 965 1.1k 1.1k 890Window propertieshackvertor5/31/2024JS0 25 25 25Valid space characters in a regexhackvertor12/9/2025JS0 25Valid characters between function and parenthesisfelipecaon5/6/2024JS0 1 1Valid characters between function and dot-parenthesis .()felipecaon5/6/2024JS0 32 32 32Valid characters before domain 1avlidienbrunn4/10/2024XSS0Url parsing diff b/w window.open and new URLSudistark2/21/2025JS0 280Url parsing diff b/w anchor.href and new URLSudistark5/26/2025JS0 175 175 175Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains0x999-x5/7/2025XSS1 12 12Unicode characters that get normalized into path traversal characters hackvertor12/12/2024JS2 1.4k 1.4k 1.4kUnicode "Latin" characters using \p{scx=Latin} RegExJorianWoltjer12/5/2025JS0 17 1URL scheme separator alternativessimoneonofri11/14/2024JS1 4 4 4URL domain dot alternativesJorianWoltjer9/10/2024JS5 6 6ToUpperCase Improper Character MorphingIDKdir7/13/2024JS1 106 106Tags that support HTML commentshackvertor1/26/2025XSS0 9 9 9Tags that stop stylehackvertor4/9/2024HTML0 17 17 17Tags that remove the span or are self closinghackvertor7/16/2024XSS0 108 108 108Tags that get reordered in the DOMhackvertor1/21/2025XSS0 14 14 14Tags that get moved out of parenthackvertor1/22/2025XSS0 11 11 11Tags that cause child tags not to be found in the DOMhackvertor7/18/2024HTML0Found 243 recordsPage 2 of 13«12345678910»
