All Vectors

Fuzzing...

	Vector name	User	Created	Type	Likes
⚠ Browser differences 6 5 6 5	Tags that DO NOT support HTML comments	hackvertor	1/26/2025	XSS	0
2 2 2	Bytes that will normalize ISO-2022-JP	Cillian-Collins	12/26/2024	XSS	1
2 2 2	HTML tags that can clobber the credentials part of the URL	0x999-x	11/4/2024	XSS	1
4 4 4 4	Entities that cause an external URL before @	hackvertor	9/25/2024	XSS	4
5 5 5 5	Characters allowed as a class separator	hackvertor	4/13/2024	XSS	0
25 25 25 25	Characters allowed in-between operators	hackvertor	4/14/2024	JS	2
⚠ Browser differences 65.5k 65.5k 65.5k 75	Characters not urlencoded when using the credentials part of the URL	hackvertor	5/28/2024	JS	1
⚠ Browser differences 1.2k 921 1.2k 965	Window properties	hackvertor	5/31/2024	JS	0
⚠ Browser differences 300 277 300 267	document properties	hackvertor	5/31/2024	JS	0
5 5 5 5	Properties that contain URLs	hackvertor	5/31/2024	JS	2
25 25 25	Characters allowed between variable name and equals sign	0x999-x	4/9/2024	JS	0
26 26 26 26	Characters allowed between an object and the dot operator	cold-try	4/15/2024	JS	0
⚠ Browser differences 124 122 124 128	All events on window	hackvertor	5/31/2024	JS	1
⚠ Browser differences 110 122 123 79	All properties on navigator (two levels of nesting deep)	freddyb	6/6/2024	JS	0
39 39 39 39	Characters allowed between an object and bracket notation	cold-try	4/15/2024	JS	0
1 1 1 1	Properties that leak the parent URL even when sandboxed	hackvertor	6/6/2024	JS	0
13 13 13 13	Properties are accessible in a sandboxed iframe	hackvertor	6/7/2024	JS	0
3 3 3 3	Characters allowed javascript and colon	renniepak	4/9/2024	JS	3
102 102 102 102	Characters that change length on .toUpperCase()	ThomasOrlita	4/15/2024	JS	0
1 1 1 1	Properties that are accessible on location	hackvertor	6/7/2024	JS	0

Found 245 records

Page 6 of 13

1 2 3 4 5 6 7 8 9 10

All Vectors

Distributed Fuzzing

All Vectors