All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Sniffing...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
⚠ Browser differences
6
5
6
5
Tags that DO NOT support HTML comments
hackvertor
1/26/2025
XSS
0
127
127
127
HTML TAGS Lists
Y4tacker
1/3/2025
XSS
0
1
1
1
Entities in-between square brackets that close cdata
hackvertor
10/8/2024
XSS
1
1
1
1
Characters ending XML Processing Instructions (WIP)
ola456
2/4/2025
XSS
0
5
5
5
Chars allowed between src and = in img tag
rootd4ddy
3/2/2025
XSS
0
4
4
4
4
Characters allowed before the JavaScript protocol colon
RemakingEden
3/3/2025
XSS
0
⚠ Browser differences
45.4k
56.7k
45.4k
62.5k
Characters that cause the backslash to be consumed with a big5 charset
hackvertor
11/1/2024
XSS
0
1
1
1
Escape inline double quote
lUcgryy
3/7/2025
XSS
0
19
19
19
HTML tags and attributes that can be used to access the URL
0x999-x
11/4/2024
XSS
1
⚠ Browser differences
2.1k
1
2.1k
Chars in href that will not default to full URL
joaxcar
11/16/2024
XSS
0
33
33
33
33
Fuzzing for Max sanitized input (simplified)
vitorfhc
4/7/2025
XSS
0
⚠ Browser differences
32
32
32
33
Characters that can precede the javascript protocol copy
rcbarnett
5/2/2024
XSS
0
175
175
175
175
Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains
0x999-x
5/7/2025
XSS
1
5
5
5
5
Characters that end unencapsulated HTML attribute values
ola456
5/14/2025
XSS
0
30
30
30
Characters allowed after equals sign for event
YouGina
12/17/2024
XSS
1
48
48
48
48
Characters allowed before host name that are ignored
hackvertor
6/11/2025
XSS
0
1
1
1
1
Characters before custom tag
s3np41k1r1t0
6/23/2025
XSS
0
1
1
1
1
Characters allowed in-between hyphens
hackvertor
4/14/2024
XSS
1
⚠ Browser differences
16
16
16
6
Entities allowed between function calls
hackvertor
6/29/2024
XSS
0
⚠ Browser differences
48
48
48
32
Valid characters before domain 1
avlidienbrunn
4/10/2024
XSS
0
Found
255
records
Page 11 of 13
«
4
5
6
7
8
9
10
11
12
13
»