All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Rendering...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
⚠ Browser differences
300
300
300
32
Characters allowed after slashes which result in an external URL
hackvertor
1/16/2025
XSS
0
8
8
8
8
Characters that act as quotes or whitespace
hackvertor
4/13/2024
HTML
0
⚠ Browser differences
10
11
10
11
Tags that cause child tags not to be found in the DOM
hackvertor
7/18/2024
HTML
0
⚠ Browser differences
1
1
1
128
All events on window
hackvertor
5/31/2024
JS
1
7
7
7
Fuzzing weird script behaviour after script text
hackvertor
7/18/2024
XSS
0
31
31
31
31
Characters allowed after greater than in events
hackvertor
6/21/2024
XSS
0
2
2
2
2
URL slash alternatives
hackvertor
6/16/2026
JS
0
6
6
6
Characters allowed before onerror events
hackvertor
3/30/2024
XSS
0
25
25
25
25
Characters allowed in-between operators
hackvertor
4/14/2024
JS
2
1
1
1
1
XSS vectors that execute automatically inside svg
hackvertor
4/17/2024
XSS
0
2
2
2
2
Characters that act as attribute quotes
hackvertor
5/28/2024
XSS
0
25
25
25
25
Characters ignored in strings when doing a non strict comparison
hackvertor
6/18/2024
JS
0
✓
✓
✓
✓
CSS :is() selector
hackvertor
7/4/2026
FEATURE
0
A
18.1ms
B
16.8ms
A
8.0ms
B
8.0ms
A
26.3ms
B
26.3ms
A
4.0ms
B
5.0ms
indexOf vs includes
hackvertor
7/4/2026
PERF
0
35
35
35
35
Characters ignored after param value in URL constructor
hackvertor
6/24/2026
JS
0
4
4
4
4
Characters ignored before param name in URL constructor
hackvertor
6/24/2026
JS
0
2
2
2
2
Characters that act as slashes in anchors
hackvertor
6/16/2026
XSS
0
4
4
4
4
Entities allowed between slashes using XSS type
hackvertor
1/16/2025
XSS
0
1
1
1
1
XSS vectors that execute automatically inside math
hackvertor
4/17/2024
XSS
0
18
18
18
18
Entities allowed between function call and number
hackvertor
7/2/2024
XSS
0
Found
283
records
Page 9 of 15
«
4
5
6
7
8
9
10
11
12
13
»
