All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Dangling...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
1
Properties that contain URLs
hackvertor
5/31/2024
SINGLE
2
⚠ Browser differences
92
118
94
71
All properties on navigator (two levels of nesting deep)
freddyb
6/6/2024
SINGLE
0
⚠ Browser differences
121
122
121
120
All events on window
hackvertor
5/31/2024
SINGLE
1
⚠ Browser differences
313
315
313
314
Characters allowed at hostname
d0ge
6/11/2024
SINGLE
1
1
1
1
1
Properties that leak the parent URL even when sandboxed
hackvertor
6/6/2024
SINGLE
0
A
6.1ms
B
15.0ms
A
11.0ms
B
16.0ms
A
43.6ms
B
70.3ms
A
9.0ms
B
12.0ms
String concat vs array join
hackvertor
7/4/2026
PERF
0
A
20.5ms
B
20.4ms
A
6.0ms
B
7.0ms
A
120.6ms
B
122.5ms
A
4.0ms
B
5.0ms
indexOf vs includes
hackvertor
7/4/2026
PERF
0
14.3ms
1.0ms
87.2ms
20.0ms
startsWith performance
hackvertor
7/4/2026
PERF
0
A
24.6ms
B
25.4ms
A
6.0ms
B
27.0ms
A
107.8ms
B
155.1ms
A
23.0ms
B
6.0ms
startsWith vs regex
hackvertor
7/3/2026
PERF
0
A
19.6ms
B
55.4ms
A
12.0ms
B
91.0ms
A
82.6ms
B
150.4ms
A
9.0ms
B
32.0ms
for loop vs forEach
hackvertor
7/3/2026
PERF
0
145.9k
145.9k
145.9k
145.9k
Characters that are valid JS variables
hackvertor
4/29/2024
JS
0
1
1
1
Host
IDKdir
7/15/2024
JS
0
5
5
5
5
Characters allowed in path traversal
joaxcar
8/26/2024
JS
0
1
1
1
1
Bypass __proto__ string match defense
vitorfhc
8/29/2024
JS
0
⚠ Browser differences
74
75
74
75
Characters not urlencoded when using the credentials part of the URL
hackvertor
5/28/2024
JS
1
1
1
1
1
Characters to break out from eval string
m-boll
5/12/2024
JS
0
157
157
157
char not urlencoded (data+)
nu11secur1ty
9/29/2024
JS
0
12
12
12
12
Unicode characters that get normalized into path traversal characters
hackvertor
12/12/2024
JS
2
17
17
17
17
URL scheme separator alternatives
simoneonofri
11/14/2024
JS
1
⚠ Browser differences
149.2k
149.2k
149.2k
144.5k
Find WAF bypass for eval context
elieehel
11/22/2024
JS
0
Found
314
records
Page 8 of 16
«
3
4
5
6
7
8
9
10
11
12
»