All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Quirking...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
4
4
4
4
Characters that cause an external URL before @
hackvertor
9/25/2024
JS
3
6
6
6
ToUpperCase Improper Character Morphing
IDKdir
7/13/2024
JS
1
1
1
1
Bypasses for __proto__ string match
vitorfhc
8/29/2024
JS
0
2k
2k
2k
2k
Characters that cause exceptions when URL encoded
hackvertor
10/3/2024
JS
2
40
40
40
40
JavaScript Scheme starting with http
BinaryScary
7/16/2024
JS
1
1
1
1
React DOM src
IDKdir
7/15/2024
JS
0
25
25
25
25
Characters allowed before optional chaining
hackvertor
5/4/2024
JS
0
13
13
13
13
Characters that act like new line or single line comment
hackvertor
4/13/2024
JS
0
1
1
1
Characters that change length on .toLowerCase()
JorianWoltjer
4/11/2024
JS
1
25
25
25
25
Characters allowed after optional chaining
hackvertor
5/4/2024
JS
2
6
6
6
Characters that can work as attribute seperator
Sudistark
8/17/2024
JS
0
⚠ Browser differences
1
3
1
Characters allowed between slashes
hackvertor
4/8/2024
JS
0
1
1
1
1
Characters allowed to end a JS string
sqjor
7/17/2024
JS
0
25
25
25
Valid characters between function and parenthesis
felipecaon
5/6/2024
JS
0
16
16
16
16
JavaScript separators between function names
InsertScript
4/2/2024
JS
0
1
1
1
Valid characters between function and dot-parenthesis .()
felipecaon
5/6/2024
JS
0
⚠ Browser differences
48
48
48
32
Scheme slash alternatives in URL() when a base is used
N25sec
5/22/2025
JS
0
68
68
68
68
Characters allowed in the protocol that still resolve host name
hackvertor
5/6/2025
JS
0
1
1
1
Includes Validation Chars Allowed
Simpsonpt
10/8/2024
JS
1
1
1
1
1
Characters allowed before event in attribute name using setAttribute
hackvertor
8/21/2024
JS
0
Found
253
records
Page 6 of 13
«
1
2
3
4
5
6
7
8
9
10
»