All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Discovering...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
65
65
65
65
Characters matching RegEx /\w/ui
JorianWoltjer
12/5/2025
JS
1
65.4k
65.4k
65.4k
65.4k
Characters encoded by escape()
JorianWoltjer
7/4/2025
JS
1
53
53
53
53
Characters allowed as start of HTML tag name
JorianWoltjer
1/30/2026
XSS
1
⚠ Browser differences
1.4k
1.4k
1.4k
1.4k
Unicode "Latin" characters using \p{scx=Latin} RegEx
JorianWoltjer
12/5/2025
JS
0
63.4k
63.4k
63.4k
63.4k
Characters encoded by encodeURIComponent()
JorianWoltjer
7/4/2025
JS
1
65.4k
65.4k
65.4k
Characters matching URLPattern capture group
JorianWoltjer
4/6/2026
JS
0
63.4k
63.4k
63.4k
63.4k
Characters encoded by encodeURI()
JorianWoltjer
7/4/2025
JS
1
65.5k
65.5k
65.5k
65.5k
Characters allowed in middle of HTML tag name
JorianWoltjer
1/30/2026
XSS
1
1
1
1
Characters that change length on .toLowerCase()
JorianWoltjer
4/11/2024
JS
1
14
14
14
Active formatting elements
JorianWoltjer
5/1/2024
XSS
0
⚠ Browser differences
1
4
4
Entities allowed between two forward slashes
InsertScript
9/19/2024
XSS
1
5
5
5
5
Character allowed after onerror event
InsertScript
4/2/2024
XSS
0
1
1
1
Characters allowed in colon entity
InsertScript
9/19/2024
XSS
0
1
1
1
characters allowed between exclamation mark and greater then
InsertScript
6/18/2024
HTML
0
⚠ Browser differences
1
1
1
2
characters after slash that make a http protocol
InsertScript
4/3/2024
XSS
0
47
47
47
47
Characters appended at the end of TLD within URL, which yield in the same host property
InsertScript
1/10/2025
JS
0
46
46
46
Characters prepended to URL, which yield in the same host property
InsertScript
1/10/2025
JS
0
1
1
1
Characters prepended to URL host. check if difference between URL and a tag
InsertScript
1/10/2025
JS
0
1
1
1
1
Character that closes HTML tag
InsertScript
4/2/2024
HTML
0
25
25
25
25
characters between function name and parentheses
InsertScript
11/3/2025
JS
0
Found
253
records
Page 11 of 13
«
4
5
6
7
8
9
10
11
12
13
»