All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Diffing...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
4
4
4
4
Characters that cause an external URL before @
hackvertor
9/25/2024
JS
3
29
29
29
29
Non-standard characters that break JSON.parse()
DreyAnd
11/15/2024
JS
1
1
1
1
domain values
nu11secur1ty
9/29/2024
JS
0
2k
2k
2k
2k
Characters that cause exceptions when URL encoded
hackvertor
10/3/2024
JS
2
2
2
2
2
HTML entities inside JavaScript URL
hackvertor
6/25/2024
JS
0
10
10
10
10
Characters transformed when using uppercase
hackvertor
11/18/2024
JS
0
1
1
1
Includes Validation Chars Allowed
Simpsonpt
10/8/2024
JS
1
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
298
298
298
298
Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost
rootd4ddy
3/2/2025
JS
0
3
3
3
3
HTML entities inside JavaScript URL before colon
hackvertor
6/25/2024
JS
0
1
1
1
Chars that can be used as opening bracket in innerHTML
nollium
4/19/2025
JS
1
1
1
1
1
Characters transformed when using lowercase
hackvertor
11/18/2024
JS
0
68
68
68
68
Characters allowed in the protocol that still resolve host name
hackvertor
5/6/2025
JS
0
25
25
25
25
Characters allowed between in operator
hackvertor
4/3/2024
JS
0
2
2
2
2
HTML entities before JavaScript URL
hackvertor
6/25/2024
JS
0
300
300
300
300
Scheme slash alternatives in URL() when a base is used
N25sec
5/22/2025
JS
0
⚠ Browser differences
1
1
1
280
Url parsing diff b/w anchor.href and new URL
Sudistark
5/26/2025
JS
0
⚠ Browser differences
24
16
24
Difference between browser-supported handlers and Shazzer 'events' list
hansmach1ne
1/5/2025
JS
0
⚠ Browser differences
1.1M
1.1M
1.1M
971.5k
Characters allowed as a tag name using DOM APIs
hackvertor
6/13/2025
JS
0
1
1
1
1
Characters appended at the end of PORT within URL, which yield a different HOST
reindaelman
6/15/2025
JS
0
Found
314
records
Page 11 of 16
«
6
7
8
9
10
11
12
13
14
15
»