All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Decoding...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
35
35
35
35
Entities still parsed in uppercase
hackvertor
7/2/2024
JS
0
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
46
46
46
Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost
rootd4ddy
3/2/2025
JS
0
⚠ Browser differences
49k
49k
49k
136.3k
Characters that are valid JS variables
hackvertor
4/29/2024
JS
0
⚠ Browser differences
1
1
1
12
Entities allowed after slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
⚠ Browser differences
1
1
1
4
Entities allowed before slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
1
1
1
1
test
0x999-x
4/10/2024
JS
0
⚠ Browser differences
1
1
1
9
Entities allowed inside host
hackvertor
7/6/2024
JS
0
48
48
48
Scheme slash alternatives in URL() when a base is used
N25sec
5/22/2025
JS
0
⚠ Browser differences
49k
49k
49k
49k
Characters that can be used as valid labels in JavaScript
hackvertor
4/30/2024
JS
2
⚠ Browser differences
1
1
1
10
Entities that are normalized for e
hackvertor
7/12/2024
JS
0
⚠ Browser differences
1
1
1
4
Entities allowed between slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
29
29
29
29
Characters allowed after the void operator
hackvertor
4/30/2024
JS
0
⚠ Browser differences
1
1
1
280
Url parsing diff b/w anchor.href and new URL
Sudistark
5/26/2025
JS
0
6
6
6
ToUpperCase Improper Character Morphing
IDKdir
7/13/2024
JS
1
8
8
8
Characters that expand upon toUpperCase()
DreyAnd
4/10/2024
JS
0
1
1
1
Host
IDKdir
7/15/2024
JS
0
1
1
1
React DOM src
IDKdir
7/15/2024
JS
0
25
25
25
25
Characters allowed before optional chaining
hackvertor
5/4/2024
JS
0
40
40
40
40
JavaScript Scheme starting with http
BinaryScary
7/16/2024
JS
1
Found
248
records
Page 10 of 13
«
4
5
6
7
8
9
10
11
12
13
»