All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Spoofing...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
300
300
300
300
Characters ignored after colon in URL constructor
hackvertor
6/15/2026
JS
0
4
4
4
4
URL domain dot alternatives
JorianWoltjer
9/10/2024
JS
5
5
5
5
5
Characters allowed in between // in absolute URL
bribes
11/29/2025
JS
0
⚠ Browser differences
1.1M
63.4k
1.1M
63.4k
Characters encoded by encodeURI()
JorianWoltjer
7/4/2025
JS
1
1
1
1
Chars that can be used as opening bracket in innerHTML
nollium
4/19/2025
JS
1
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
⚠ Browser differences
70
71
70
71
Characters urlencoded that get transformed when using the credentials part of the URL
hackvertor
9/24/2024
JS
0
A
5.1ms
B
12.6ms
A
8.0ms
B
13.0ms
A
28.8ms
B
51.7ms
A
9.0ms
B
12.0ms
String concat vs array join
hackvertor
7/4/2026
PERF
0
A
18.1ms
B
16.8ms
A
8.0ms
B
8.0ms
A
132.7ms
B
135.8ms
A
4.0ms
B
5.0ms
indexOf vs includes
hackvertor
7/4/2026
PERF
0
15.1ms
1.0ms
97.2ms
20.0ms
startsWith performance
hackvertor
7/4/2026
PERF
0
A
17.4ms
B
25.7ms
A
7.0ms
B
32.0ms
A
117.4ms
B
180.2ms
A
23.0ms
B
6.0ms
startsWith vs regex
hackvertor
7/3/2026
PERF
0
A
18.6ms
B
24.5ms
A
13.0ms
B
112.0ms
A
109.7ms
B
162.4ms
A
9.0ms
B
32.0ms
for loop vs forEach
hackvertor
7/3/2026
PERF
0
⚠ Browser differences
5
5
1
5
Characters allowed before CSS selectors
hackvertor
7/15/2024
XSS
0
⚠ Browser differences
10
9
10
9
Attributes that are also DOM properties
hackvertor
4/30/2024
XSS
0
3
3
3
3
Entities that convert to less than in a iframe srcdoc
hackvertor
8/1/2024
XSS
0
2
2
2
2
Tags that HTML encode it's contents
hackvertor
7/16/2024
XSS
0
5
5
5
Characters allowed between multiple HTML attributes
JorianWoltjer
9/12/2024
XSS
4
1
1
1
1
Characters in-between square brackets that close cdata
hackvertor
10/8/2024
XSS
0
3
3
3
3
Entities that convert to greater than in a iframe srcdoc
hackvertor
8/1/2024
XSS
0
2
2
2
2
ISO-2022-JP ASCII escape sequence
hackvertor
12/11/2024
XSS
1
Found
283
records
Page 9 of 15
«
4
5
6
7
8
9
10
11
12
13
»
