All Vectors

Bamboozling...

	Vector name	User	Created	Type	Likes
6 6 6	Allowed characters right after tag name & before tag closure, no other characters in between	hansmach1ne	1/9/2025	XSS	0
14 14 14	Active formatting elements	JorianWoltjer	5/1/2024	XSS	0
2 2 2	Bytes that will scramble ISO-2022-JP	Cillian-Collins	12/26/2024	XSS	1
⚠ Browser differences 6 5 6 5	Tags that DO NOT support HTML comments	hackvertor	1/26/2025	XSS	0
2 2 2	Bytes that will normalize ISO-2022-JP	Cillian-Collins	12/26/2024	XSS	1
2 2 2	HTML tags that can clobber the credentials part of the URL	0x999-x	11/4/2024	XSS	1
4 4 4 4	Entities that cause an external URL before @	hackvertor	9/25/2024	XSS	4
5 5 5 5	Characters allowed as a class separator	hackvertor	4/13/2024	XSS	0
25 25 25 25	Characters allowed in-between operators	hackvertor	4/14/2024	JS	2
⚠ Browser differences 65.5k 65.5k 65.5k 75	Characters not urlencoded when using the credentials part of the URL	hackvertor	5/28/2024	JS	1
⚠ Browser differences 1.2k 969 1.2k 965	Window properties	hackvertor	5/31/2024	JS	0
⚠ Browser differences 302 277 301 267	document properties	hackvertor	5/31/2024	JS	0
5 5 5 5	Properties that contain URLs	hackvertor	5/31/2024	JS	2
25 25 25	Characters allowed between variable name and equals sign	0x999-x	4/9/2024	JS	0
26 26 26 26	Characters allowed between an object and the dot operator	cold-try	4/15/2024	JS	0
⚠ Browser differences 125 122 125 128	All events on window	hackvertor	5/31/2024	JS	1
⚠ Browser differences 123 118 127 79	All properties on navigator (two levels of nesting deep)	freddyb	6/6/2024	JS	0
39 39 39 39	Characters allowed between an object and bracket notation	cold-try	4/15/2024	JS	0
1 1 1 1	Properties that leak the parent URL even when sandboxed	hackvertor	6/6/2024	JS	0
13 13 13 13	Properties are accessible in a sandboxed iframe	hackvertor	6/7/2024	JS	0

Found 248 records

Page 6 of 13

1 2 3 4 5 6 7 8 9 10

All Vectors

Distributed Fuzzing

All Vectors