All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Harvesting...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
⚠ Browser differences
67
65
67
67
Characters allowed inside javascript protocol and still returns the hostname
RenwaX23
7/21/2025
JS
3
2
2
2
2
relative & protocol relative url starting with a slash and not immediately having a slash after it.
Rhynorater
3/28/2026
JS
0
1
1
1
Includes Validation Chars Allowed
Simpsonpt
10/8/2024
JS
1
⚠ Browser differences
1
1
1
280
Url parsing diff b/w anchor.href and new URL
Sudistark
5/26/2025
JS
0
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
6
6
6
Characters that can work as attribute seperator
Sudistark
8/17/2024
JS
0
1
1
1
1
Characters between < and element name
ThomasOrlita
4/15/2024
HTML
1
332
332
332
332
Characters allowed after hostname but don't change the hostname
ThomasOrlita
4/15/2024
JS
2
297
297
297
297
Characters allowed within a hostname but don't change the hostname
ThomasOrlita
4/30/2024
JS
1
7
7
7
7
Characters between element name and >
ThomasOrlita
4/15/2024
HTML
0
102
102
102
102
Characters that change length on .toUpperCase()
ThomasOrlita
4/15/2024
JS
0
302
302
302
302
Characters allowed between hostname and / but don't change the hostname
ThomasOrlita
4/15/2024
JS
4
33
33
33
33
Characters allowed before javascript URL
ThomasOrlita
4/15/2024
JS
0
9
9
9
9
XSS vectors that consume tag
Y4tacker
11/5/2024
XSS
1
127
127
127
HTML TAGS Lists
Y4tacker
1/3/2025
XSS
0
30
30
30
Characters allowed after equals sign for event
YouGina
12/17/2024
XSS
1
1
1
1
1
mamad
amirjoudak
6/2/2026
JS
0
1
1
1
Test chars in js protocol
archyxsec
8/19/2026
JS
0
106
106
106
106
Named HTML entities that can be closed with !
avlidienbrunn
7/29/2025
XSS
2
4
4
4
4
Characters allowed javascript and colon copy2
avlidienbrunn
9/29/2024
JS
0
Found
313
records
Page 4 of 16
«
1
2
3
4
5
6
7
8
9
10
»