All VectorsVector nameUser Created Type Likes 312 314 311Characters allowed at hostnamed0ge6/11/2024JS1 3 1 3Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1Quotesdogspyagent7/13/2024XSS0Find WAF bypass for eval contextelieehel11/22/2024JS0 1 1Valid characters between function and dot-parenthesis .()felipecaon5/6/2024JS0 25Valid characters between function and parenthesisfelipecaon5/6/2024JS0Characters allowed between < and element felipecaon5/6/2024HTML0 82encodeURI() not encoded with %forglockenspielexact7/11/2025JS1 116 79 123All properties on navigator (two levels of nesting deep)freddyb6/6/2024JS0 2 2 2Characters that act as attribute quotes copyfreddyb5/31/2024XSS0 136.3k 136.3k 136.3kCharacters that are valid JS variableshackvertor4/29/2024JS0 10 10 11Attributes that are also DOM propertieshackvertor4/30/2024XSS0 6Characters allowed before onerror eventshackvertor3/30/2024XSS0 2 2 2Tags that HTML encode it's contentshackvertor7/16/2024XSS0 75 75 74Characters not urlencoded when using the credentials part of the URLhackvertor5/28/2024JS1 965 1.1k 1.1k 890Window propertieshackvertor5/31/2024JS0 3 3 3Entities that convert to greater than in a iframe srcdochackvertor8/1/2024XSS0 13 13 13Properties are accessible in a sandboxed iframehackvertor6/7/2024JS0 2 2HTML entities before JavaScript URLhackvertor6/25/2024JS0 292 271 267document propertieshackvertor5/31/2024JS0Found 243 recordsPage 5 of 13«12345678910»