All VectorsVector nameUser Created Type Likes 5 5 5 5Characters allowed in path traversaljoaxcar8/26/2024JS0⚠ Browser differences 149.2k 50.7k 50.7k 50.7kFind WAF bypass for eval contextelieehel11/22/2024JS0⚠ Browser differences 3 1 3 1Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1⚠ Browser differences 70 71 70 71Characters urlencoded that get transformed when using the credentials part of the URLhackvertor9/24/2024JS0⚠ Browser differences 313 312 312 314Characters allowed at hostnamed0ge6/11/2024JS1 29 29 29 29Non-standard characters that break JSON.parse()DreyAnd11/15/2024JS1 2 2 2 2HTML entities inside JavaScript URLhackvertor6/25/2024JS0 1 1 1Valid characters between function and dot-parenthesis .()felipecaon5/6/2024JS0 1 1 1Difference between browser-supported handlers and Shazzer 'all_browser_events' listhansmach1ne1/5/2025JS0 1 1 1Includes Validation Chars AllowedSimpsonpt10/8/2024JS1⚠ Browser differences 302 50 50 302Characters allowed between hostname and / but don't change the hostnameThomasOrlita4/15/2024JS4 25 25 25Loose comparison, characters appended which still result in type coercionhansmach1ne1/6/2025JS1 25 25 25Valid characters between function and parenthesisfelipecaon5/6/2024JS0 1 1 1 1test0x999-x4/10/2024JS0 26 26 26 26Characters allowed after parentheseshackvertor4/1/2024JS0 4 4 4 4Entities allowed before slashes on a protocol relative URLhackvertor7/6/2024JS0 1 1 1Characters that change length on .toLowerCase()JorianWoltjer4/11/2024JS1 25 25 25 25Characters allowed in-between operatorshackvertor4/14/2024JS2⚠ Browser differences 18 18 18 12Entities allowed after slashes on a protocol relative URLhackvertor7/6/2024JS0 3 3 3 3Characters that act as array literalshackvertor6/24/2024JS0Found 258 recordsPage 5 of 13«12345678910»
