All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Covering...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
1
JavaScript Scheme starting with https://
BinaryScary
6/28/2024
JS
4
⚠ Browser differences
298
46
46
Characters prepended to URL, which yield in the same host property
InsertScript
1/10/2025
JS
0
1
1
1
Characters prepended to URL host. check if difference between URL and a tag
InsertScript
1/10/2025
JS
0
35
35
35
35
Entities still parsed in uppercase
hackvertor
7/2/2024
JS
0
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
298
298
298
Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost
rootd4ddy
3/2/2025
JS
0
145.9k
145.9k
145.9k
145.9k
Characters that are valid JS variables
hackvertor
4/29/2024
JS
0
⚠ Browser differences
18
18
18
12
Entities allowed after slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
4
4
4
4
Entities allowed between slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
4
4
4
4
Entities allowed before slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
1
1
1
1
test
0x999-x
4/10/2024
JS
0
⚠ Browser differences
15
15
15
9
Entities allowed inside host
hackvertor
7/6/2024
JS
0
⚠ Browser differences
300
300
300
32
Scheme slash alternatives in URL() when a base is used
N25sec
5/22/2025
JS
0
⚠ Browser differences
145.9k
145.9k
145.9k
49k
Characters that can be used as valid labels in JavaScript
hackvertor
4/30/2024
JS
2
10
10
10
10
Entities that are normalized for e
hackvertor
7/12/2024
JS
0
29
29
29
29
Characters allowed after the void operator
hackvertor
4/30/2024
JS
0
⚠ Browser differences
1
1
1
280
Url parsing diff b/w anchor.href and new URL
Sudistark
5/26/2025
JS
0
6
6
6
ToUpperCase Improper Character Morphing
IDKdir
7/13/2024
JS
1
8
8
8
Characters that expand upon toUpperCase()
DreyAnd
4/10/2024
JS
0
1
1
1
Host
IDKdir
7/15/2024
JS
0
Found
269
records
Page 10 of 14
«
5
6
7
8
9
10
11
12
13
14
»