All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Discovering...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
25
25
25
25
Characters allowed between in operator
hackvertor
4/3/2024
JS
0
25
25
25
25
Valid space characters in a regex
hackvertor
12/9/2025
JS
0
65
65
65
65
Characters matching RegEx /\w/ui
JorianWoltjer
12/5/2025
JS
1
2
2
2
2
HTML entities before JavaScript URL
hackvertor
6/25/2024
JS
0
300
300
300
300
Scheme slash alternatives in URL() when a base is used
N25sec
5/22/2025
JS
0
⚠ Browser differences
1
1
1
280
Url parsing diff b/w anchor.href and new URL
Sudistark
5/26/2025
JS
0
⚠ Browser differences
24
16
24
Difference between browser-supported handlers and Shazzer 'events' list
hansmach1ne
1/5/2025
JS
0
⚠ Browser differences
1.1M
1.1M
1.1M
971.5k
Characters allowed as a tag name using DOM APIs
hackvertor
6/13/2025
JS
0
1
1
1
1
Characters appended at the end of PORT within URL, which yield a different HOST
reindaelman
6/15/2025
JS
0
⚠ Browser differences
3
3
1
Characters allowed between slashes
hackvertor
4/8/2024
JS
0
1
1
1
Difference between browser-supported handlers and Shazzer 'all_browser_events' list
hansmach1ne
1/5/2025
JS
0
1
1
1
1
Injection in src attribute PORT, characters that change hostname
reindaelman
6/15/2025
JS
1
25
25
25
Loose comparison, characters appended which still result in type coercion
hansmach1ne
1/6/2025
JS
1
1.1M
1.1M
1.1M
1.1M
Characters encoded by encodeURIComponent()
JorianWoltjer
7/4/2025
JS
1
1.1M
1.1M
1.1M
1.1M
Characters encoded by encodeURI()
JorianWoltjer
7/4/2025
JS
1
1
1
1
1
JavaScript Scheme starting with https://
BinaryScary
6/28/2024
JS
4
26
26
26
26
Characters allowed after parentheses
hackvertor
4/1/2024
JS
0
1.1M
1.1M
1.1M
1.1M
Characters encoded by escape()
JorianWoltjer
7/4/2025
JS
1
82
82
82
82
encodeURI() not encoded with %
forglockenspielexact
7/11/2025
JS
1
16
16
16
16
JavaScript separators between function names
InsertScript
4/2/2024
JS
0
Found
314
records
Page 12 of 16
«
7
8
9
10
11
12
13
14
15
16
»