All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Injecting...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
12
12
12
Unicode characters that get normalized into path traversal characters
hackvertor
12/12/2024
JS
2
1
1
1
1
mamad
amirjoudak
6/2/2026
JS
0
302
302
302
302
Characters allowed between hostname and / but don't change the hostname
ThomasOrlita
4/15/2024
JS
4
149.2k
149.2k
149.2k
149.2k
Characters that are valid JS part variables
hackvertor
6/9/2026
JS
0
3
3
3
3
HTML entities inside JavaScript URL before colon
hackvertor
6/25/2024
JS
0
25
25
25
25
Characters allowed between in operator
hackvertor
4/3/2024
JS
0
⚠ Browser differences
24
16
24
Difference between browser-supported handlers and Shazzer 'events' list
hansmach1ne
1/5/2025
JS
0
1
1
1
1
Characters allowed begin from a forward slash character in javascript protocol
siunam321
10/28/2025
JS
0
1
1
1
Chars that can be used as opening bracket in innerHTML
nollium
4/19/2025
JS
1
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
5
5
5
5
Characters allowed in path traversal
joaxcar
8/26/2024
JS
0
24
24
24
Characters that can be used in eval to write code in between
m-boll
5/12/2024
JS
0
1
1
1
Bypasses for __proto__ string match
vitorfhc
8/29/2024
JS
0
A
6.3ms
B
17.9ms
A
11.0ms
B
16.0ms
A
5.1ms
B
12.3ms
A
9.0ms
B
12.0ms
String concat vs array join
hackvertor
7/4/2026
PERF
0
A
8.2ms
B
8.1ms
A
6.0ms
B
7.0ms
A
22.1ms
B
20.9ms
A
4.0ms
B
5.0ms
indexOf vs includes
hackvertor
7/4/2026
PERF
0
14.8ms
1.0ms
15.1ms
20.0ms
startsWith performance
hackvertor
7/4/2026
PERF
0
A
19.7ms
B
32.6ms
A
6.0ms
B
27.0ms
A
18.1ms
B
26.1ms
A
23.0ms
B
6.0ms
startsWith vs regex
hackvertor
7/3/2026
PERF
0
A
13.5ms
B
38.9ms
A
12.0ms
B
91.0ms
A
14.9ms
B
29.5ms
A
9.0ms
B
32.0ms
for loop vs forEach
hackvertor
7/3/2026
PERF
0
7
7
7
7
Characters ignored in an attribute name
hackvertor
5/28/2024
XSS
0
5
5
5
5
Characters allowed between multiple HTML attributes
JorianWoltjer
9/12/2024
XSS
4
Found
307
records
Page 9 of 16
«
4
5
6
7
8
9
10
11
12
13
»
