All Vectors

Annoying...

	Vector name	User	Created	Type	Likes
2 2 2	framers event executors	weizman	4/10/2024	XSS	0
1 1 1	Bypasses for __proto__ string match	vitorfhc	8/29/2024	JS	0
33 33 33	Fuzzing for Max sanitized input (simplified)	vitorfhc	4/7/2025	XSS	0
1 1 1	Bypass __proto__ string match defense	vitorfhc	8/29/2024	JS	0
1 1 1	Attribute separators	tr3w	5/6/2024	HTML	0
1 1 1	Chars allowed before domain	t0xodile	9/24/2024	XSS	0
1 1 1 1	chars before img tags	t0xodile	10/25/2025	XSS	0
6 6 6 6	Chars allowed before style attribute...	t0xodile	10/25/2025	XSS	0
5 5 5 5	Characters allowed before after onerror events	t0xodile	10/23/2025	XSS	1
1 1 1 1	Characters allowed to end a JS string	sqjor	7/17/2024	JS	0
1 1 1	Mutated XSS with img onerror	sqjor	7/30/2024	XSS	0
1 1 1 1	Characters allowed begin from a forward slash character in javascript protocol	siunam321	10/28/2025	JS	0
⚠ Browser differences 1 1 1 17	URL scheme separator alternatives	simoneonofri	11/14/2024	JS	1
1 1 1	Characters before custom tag	s3np41k1r1t0	6/23/2025	XSS	0
5 5 5	Chars allowed between src and = in img tag	rootd4ddy	3/2/2025	XSS	0
46 46 46	Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost	rootd4ddy	3/2/2025	JS	0
3 3 3 3	Characters allowed javascript and colon	renniepak	4/9/2024	JS	3
1 1 1	Impossible lab frameset	renniepak	11/27/2024	HTML	0
32 32 32 32	Characters that can precede the javascript protocol	renniepak	4/10/2024	XSS	3
1 1 1 1	Injection in src attribute PORT, characters that change hostname	reindaelman	6/15/2025	JS	1

Found 245 records

Page 1 of 13