All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Minimizing...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
⚠ Browser differences
34
35
34
34
HTML elements that parse differently when rendered
hackvertor
4/19/2024
XSS
1
⚠ Browser differences
2
2
1
2
Malformed HTML comments
hackvertor
1/17/2025
XSS
0
1
1
1
Entities allowed inside function name
hackvertor
7/2/2024
XSS
0
6
6
6
6
CSS class name separators
hackvertor
8/6/2026
XSS
0
3
3
3
3
Entities that convert to less than in a iframe srcdoc
hackvertor
8/1/2024
XSS
0
⚠ Browser differences
117
105
117
106
Tags that support HTML comments
hackvertor
1/26/2025
XSS
0
35
35
35
35
Entities still parsed in uppercase
hackvertor
7/2/2024
JS
0
25
25
25
25
Valid space characters in a regex
hackvertor
12/9/2025
JS
0
3
3
3
3
Entities that convert to greater than in a iframe srcdoc
hackvertor
8/1/2024
XSS
0
18
18
18
18
Entities after protocol-relative URL
hackvertor
4/3/2026
JS
2
13
13
13
13
Characters that act like new line or single line comment
hackvertor
4/13/2024
JS
0
39
39
39
39
HTML tags that force HTML mode inside SVG
hackvertor
8/2/2024
XSS
1
✓
✓
✓
✓
CSS :is() selector
hackvertor
7/4/2026
FEATURE
0
A
20.5ms
B
20.4ms
A
6.0ms
B
7.0ms
A
120.6ms
B
122.5ms
A
4.0ms
B
5.0ms
indexOf vs includes
hackvertor
7/4/2026
PERF
0
3
3
3
3
Characters ignored in pathname using a URL constructor
hackvertor
6/24/2026
JS
0
35
35
35
35
Characters ignored after param value in URL constructor
hackvertor
6/24/2026
JS
0
⚠ Browser differences
11
10
11
11
Escaped characters that cause an external request in-between forward slashes
hackvertor
8/6/2026
XSS
0
8
8
8
8
Consuming tags
hackvertor
4/8/2024
HTML
1
5
5
5
5
Characters allowed as a class separator
hackvertor
4/13/2024
XSS
0
1
1
1
1
Characters allowed before event in attribute name using setAttribute
hackvertor
8/21/2024
JS
0
Found
313
records
Page 10 of 16
«
5
6
7
8
9
10
11
12
13
14
»
