All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Spraying...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
work
nu11secur1ty
9/29/2024
HTML
0
1
HTML vector
nu11secur1ty
9/29/2024
HTML
0
2
2
2
char not urlencoded (data)
nu11secur1ty
9/29/2024
JS
0
1
1
1
domain values
nu11secur1ty
9/29/2024
JS
0
7
7
7
7
Characters that close or encapsulate HTML attribute values
ola456
11/5/2024
XSS
1
1
1
1
1
Characters ending XML Processing Instructions (WIP)
ola456
2/4/2025
XSS
0
5
5
5
5
Characters that end unencapsulated HTML attribute values
ola456
5/14/2025
XSS
0
7
7
7
7
Closing title tag name separators
ola456
9/15/2025
XSS
0
1
1
1
Characters allowed to break double quotes
p3n7a90n
6/30/2024
XSS
0
25
25
25
25
String trim whitepace characters
piprett
5/16/2026
JS
2
1
1
1
1
Decimal separators in parseFloat
piprett
5/17/2026
JS
0
32
32
32
32
Characters that can precede the javascript protocol copy
rcbarnett
5/2/2024
XSS
0
1
1
1
1
Characters appended at the end of PORT within URL, which yield a different HOST
reindaelman
6/15/2025
JS
0
1
1
1
1
Injection in src attribute PORT, characters that change hostname
reindaelman
6/15/2025
JS
1
3
3
3
3
Characters allowed javascript and colon
renniepak
4/9/2024
JS
4
1
1
1
Impossible lab frameset
renniepak
11/27/2024
HTML
0
32
32
32
32
Characters that can precede the javascript protocol
renniepak
4/10/2024
XSS
4
298
298
298
298
Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost
rootd4ddy
3/2/2025
JS
0
5
5
5
Chars allowed between src and = in img tag
rootd4ddy
3/2/2025
XSS
0
1
1
1
1
Characters before custom tag
s3np41k1r1t0
6/23/2025
XSS
0
Found
313
records
Page 15 of 16
«
7
8
9
10
11
12
13
14
15
16
»