All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Obfuscating...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
1
XSS vectors that execute automatically inside math
hackvertor
4/17/2024
XSS
0
18
18
18
18
Entities allowed between function call and number
hackvertor
7/2/2024
XSS
0
299
299
299
299
Characters appended at the end of TLD within URL, which yield in the same Origin
hansmach1ne
1/5/2025
JS
3
6
6
6
Allowed characters right after tag name & before tag closure, no other characters in between
hansmach1ne
1/9/2025
XSS
0
⚠ Browser differences
24
16
24
Difference between browser-supported handlers and Shazzer 'events' list
hansmach1ne
1/5/2025
JS
0
1
1
1
Difference between browser-supported handlers and Shazzer 'all_browser_events' list
hansmach1ne
1/5/2025
JS
0
25
25
25
Loose comparison, characters appended which still result in type coercion
hansmach1ne
1/6/2025
JS
1
3
3
3
3
Characters that can be inside the javascript protocol
hipotermia
1/22/2025
XSS
0
1
1
1
CSS inline property definition
hipotermia
3/12/2025
HTML
0
5
5
5
5
Characters allowed in path traversal
joaxcar
8/26/2024
JS
0
8
8
8
8
DOM element relationships
joaxcar
4/10/2024
XSS
0
⚠ Browser differences
2.1k
1
2.1k
2.1k
Chars in href that will not default to full URL
joaxcar
11/16/2024
XSS
0
2
2
2
2
List of HTML elements that convert to arbitrary string
joaxcar
4/10/2024
XSS
0
1
1
1
Escape inline double quote
lUcgryy
3/7/2025
XSS
0
1
1
1
Characters that starts element name
lUcgryy
3/10/2025
HTML
0
1
1
1
1
Characters to break out from eval string
m-boll
5/12/2024
JS
0
24
24
24
Characters that can be used in eval to write code in between
m-boll
5/12/2024
JS
0
1
1
1
Characters that can be between < and script>
m10x
11/12/2024
HTML
0
1
1
1
Chars that can be used as opening bracket in innerHTML
nollium
4/19/2025
JS
1
157
157
157
char not urlencoded (data+)
nu11secur1ty
9/29/2024
JS
0
Found
313
records
Page 14 of 16
«
7
8
9
10
11
12
13
14
15
16
»