All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
All vectors
Categories
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
All vectors
Categories
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Escaping...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
characters allowed between exclamation mark and greater then
InsertScript
6/18/2024
HTML
0
4
4
4
4
URL domain dot alternatives
JorianWoltjer
9/10/2024
JS
5
⚠ Browser differences
2
1
2
JIS X 0208 bytes that produce ASCII characters
JorianWoltjer
9/22/2024
JS
1
63.4k
63.4k
63.4k
63.4k
Characters encoded by encodeURIComponent()
JorianWoltjer
7/4/2025
JS
1
5
5
5
Characters allowed between multiple HTML attributes
JorianWoltjer
9/12/2024
XSS
4
14
14
14
Active formatting elements
JorianWoltjer
5/1/2024
XSS
0
63.4k
63.4k
63.4k
63.4k
Characters encoded by encodeURI()
JorianWoltjer
7/4/2025
JS
1
53
53
53
53
Characters allowed as start of HTML tag name
JorianWoltjer
1/30/2026
XSS
0
⚠ Browser differences
1.4k
1.4k
1.4k
1.4k
Unicode "Latin" characters using \p{scx=Latin} RegEx
JorianWoltjer
12/5/2025
JS
0
65.4k
65.4k
65.4k
65.4k
Characters encoded by escape()
JorianWoltjer
7/4/2025
JS
1
1
1
1
Characters that change length on .toLowerCase()
JorianWoltjer
4/11/2024
JS
1
65.5k
65.5k
65.5k
65.5k
Characters allowed in middle of HTML tag name
JorianWoltjer
1/30/2026
XSS
0
65
65
65
65
Characters matching RegEx /\w/ui
JorianWoltjer
12/5/2025
JS
1
48
48
48
Scheme slash alternatives in URL() when a base is used
N25sec
5/22/2025
JS
0
1
1
1
1
dsqd
NikolaT3esla
10/1/2025
HTML
0
1
1
1
1
Electron XSS TEST
P4rkJW
10/22/2025
HTML
0
4
4
4
Characters allowed before the JavaScript protocol colon
RemakingEden
3/3/2025
XSS
0
⚠ Browser differences
67
65
67
67
Characters allowed inside javascript protocol and still returns the hostname
RenwaX23
7/21/2025
JS
3
1
1
1
Includes Validation Chars Allowed
Simpsonpt
10/8/2024
JS
1
6
6
6
Characters that can work as attribute seperator
Sudistark
8/17/2024
JS
0
Found
245
records
Page 3 of 13
«
1
2
3
4
5
6
7
8
9
10
»