All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Side-channeling...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Open fuzz launcher
Your browser automatically contributes to distributed fuzzing when idle. The launcher keeps fuzzing going while you use other tabs.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
145.9k
145.9k
145.9k
145.9k
Characters that are valid JS variables
hackvertor
4/29/2024
JS
0
⚠ Browser differences
10
9
10
9
Attributes that are also DOM properties
hackvertor
4/30/2024
XSS
0
2
2
2
2
Tags that HTML encode it's contents
hackvertor
7/16/2024
XSS
0
⚠ Browser differences
74
75
74
75
Characters not urlencoded when using the credentials part of the URL
hackvertor
5/28/2024
JS
1
⚠ Browser differences
996
998
996
950
Window properties
hackvertor
5/31/2024
SINGLE
0
13
13
13
13
Properties are accessible in a sandboxed iframe
hackvertor
6/7/2024
SINGLE
0
3
3
3
3
Entities that convert to greater than in a iframe srcdoc
hackvertor
8/1/2024
XSS
0
1
1
1
1
Properties that are accessible on location
hackvertor
6/7/2024
SINGLE
0
⚠ Browser differences
298
282
298
276
document properties
hackvertor
5/31/2024
SINGLE
0
1
1
1
1
Characters ignored after backslash with multiline string
hackvertor
6/18/2024
JS
0
4
4
4
4
Characters that act as new lines in multi line strings
hackvertor
6/20/2024
JS
1
50
50
50
50
HTML entities that create ASCII characters inside a JavaScript URL
hackvertor
6/25/2024
JS
4
1
1
1
1
Properties that contain URLs
hackvertor
5/31/2024
SINGLE
2
19
19
19
19
Entities allowed before function calls
hackvertor
7/2/2024
XSS
0
35
35
35
35
Entities still parsed in uppercase
hackvertor
7/2/2024
JS
0
577
577
577
577
Entities allowed as JS variables
hackvertor
7/2/2024
XSS
1
4
4
4
4
Entities allowed between slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
4
4
4
4
Entities that cause an external URL before @
hackvertor
9/25/2024
XSS
4
6
6
6
Characters allowed before onerror events
hackvertor
3/30/2024
XSS
0
⚠ Browser differences
121
122
121
120
All events on window
hackvertor
5/31/2024
SINGLE
1
Found
317
records
Page 6 of 16
«
1
2
3
4
5
6
7
8
9
10
»