All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
All vectors
Categories
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
All vectors
Categories
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Mutating...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
47
47
47
Characters appended at the end of TLD within URL, which yield in the same host property
InsertScript
1/10/2025
JS
0
3
3
3
3
Characters that act as array literals
hackvertor
6/24/2024
JS
0
46
46
46
Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost
rootd4ddy
3/2/2025
JS
0
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
1
1
1
JavaScript Scheme starting with https://
BinaryScary
6/28/2024
JS
4
46
46
46
Characters prepended to URL, which yield in the same host property
InsertScript
1/10/2025
JS
0
1
1
1
Characters prepended to URL host. check if difference between URL and a tag
InsertScript
1/10/2025
JS
0
3
3
3
3
HTML entities inside JavaScript URL before colon
hackvertor
6/25/2024
JS
0
35
35
35
35
Entities still parsed in uppercase
hackvertor
7/2/2024
JS
0
50
50
50
50
HTML entities that create ASCII characters inside a JavaScript URL
hackvertor
6/25/2024
JS
4
⚠ Browser differences
1
1
1
4
Entities allowed between slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
⚠ Browser differences
49k
49k
49k
136.3k
Characters that are valid JS variables
hackvertor
4/29/2024
JS
0
⚠ Browser differences
1
1
1
12
Entities allowed after slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
⚠ Browser differences
1
1
1
4
Entities allowed before slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
⚠ Browser differences
45
45
45
29
Characters allowed within a hostname but don't change the hostname
ThomasOrlita
4/30/2024
JS
1
⚠ Browser differences
1
1
1
9
Entities allowed inside host
hackvertor
7/6/2024
JS
0
1
1
1
1
test
0x999-x
4/10/2024
JS
0
⚠ Browser differences
49k
49k
49k
49k
Characters that can be used as valid labels in JavaScript
hackvertor
4/30/2024
JS
2
⚠ Browser differences
1
1
1
10
Entities that are normalized for e
hackvertor
7/12/2024
JS
0
29
29
29
29
Characters allowed after the void operator
hackvertor
4/30/2024
JS
0
Found
245
records
Page 9 of 13
«
4
5
6
7
8
9
10
11
12
13
»