All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Slicing...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
⚠ Browser differences
67
65
67
67
Characters allowed inside javascript protocol and still returns the hostname
RenwaX23
7/21/2025
JS
3
2
2
2
2
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Rhynorater
3/28/2026
JS
0
1
1
1
Includes Validation Chars Allowed
Simpsonpt
10/8/2024
JS
1
⚠ Browser differences
1
1
1
280
Url parsing diff b/w anchor.href and new URL
Sudistark
5/26/2025
JS
0
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
6
6
6
Characters that can work as attribute seperator
Sudistark
8/17/2024
JS
0
⚠ Browser differences
332
332
332
64
Characters allowed after hostname but don't change the hostname
ThomasOrlita
4/15/2024
JS
2
102
102
102
102
Characters that change length on .toUpperCase()
ThomasOrlita
4/15/2024
JS
0
33
33
33
33
Characters allowed before javascript URL
ThomasOrlita
4/15/2024
JS
0
7
7
7
7
Characters between element name and >
ThomasOrlita
4/15/2024
HTML
0
1
1
1
1
Characters between < and element name
ThomasOrlita
4/15/2024
HTML
1
302
302
302
302
Characters allowed between hostname and / but don't change the hostname
ThomasOrlita
4/15/2024
JS
4
⚠ Browser differences
297
45
45
29
Characters allowed within a hostname but don't change the hostname
ThomasOrlita
4/30/2024
JS
1
127
127
127
HTML TAGS Lists
Y4tacker
1/3/2025
XSS
0
9
9
9
XSS vectors that consume tag
Y4tacker
11/5/2024
XSS
1
30
30
30
Characters allowed after equals sign for event
YouGina
12/17/2024
XSS
1
1
1
1
1
mamad
amirjoudak
6/2/2026
JS
0
106
106
106
106
Named HTML entities that can be closed with !
avlidienbrunn
7/29/2025
XSS
2
⚠ Browser differences
300
48
48
32
Valid characters before domain 1
avlidienbrunn
4/10/2024
XSS
0
4
4
4
4
Characters allowed javascript and colon copy2
avlidienbrunn
9/29/2024
JS
0
Found
280
records
Page 4 of 14
«
1
2
3
4
5
6
7
8
9
10
»