All VectorsVector nameUser Created Type Likes 5 5 5Characters allowed in path traversaljoaxcar8/26/2024JS0Find WAF bypass for eval contextelieehel11/22/2024JS0 3 1 3Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1 70 71 71Characters urlencoded that get transformed when using the credentials part of the URLhackvertor9/24/2024JS0 312 314 311Characters allowed at hostnamed0ge6/11/2024JS1 29 29Non-standard characters that break JSON.parse()DreyAnd11/15/2024JS1 2 2 2HTML entities inside JavaScript URLhackvertor6/25/2024JS0 1 1Valid characters between function and dot-parenthesis .()felipecaon5/6/2024JS0 16Difference between browser-supported handlers and Shazzer 'all_browser_events' listhansmach1ne1/5/2025JS0 1Includes Validation Chars AllowedSimpsonpt10/8/2024JS1 278 278 278Characters allowed between hostname and / but don't change the hostnameThomasOrlita4/15/2024JS4 25Loose comparison, characters appended which still result in type coercionhansmach1ne1/6/2025JS1 25Valid characters between function and parenthesisfelipecaon5/6/2024JS0test0x999-x4/10/2024JS0 26 26 26Characters allowed after parentheseshackvertor4/1/2024JS0 4 4 4Entities allowed before slashes on a protocol relative URLhackvertor7/6/2024JS0 1Characters that change length on .toLowerCase()JorianWoltjer4/11/2024JS1 25 25 25Characters allowed in-between operatorshackvertor4/14/2024JS2 12 12 12Entities allowed after slashes on a protocol relative URLhackvertor7/6/2024JS0 3 3 3Characters that act as array literalshackvertor6/24/2024JS0Found 239 recordsPage 5 of 12«12345678910»
