All VectorsVector nameUser Created Type Likes⚠ Browser differences 47 47 47 31Characters appended at the end of TLD within URL, which yield in the same Originhansmach1ne1/5/2025JS2 127 127 127HTML TAGS ListsY4tacker1/3/2025XSS0 2 2 2Bytes that will scramble ISO-2022-JPCillian-Collins12/26/2024XSS1 2 2 2Bytes that will normalize ISO-2022-JPCillian-Collins12/26/2024XSS1 30 30 30Characters allowed after equals sign for eventYouGina12/17/2024XSS1 12 12 12Unicode characters that get normalized into path traversal characters hackvertor12/12/2024JS2 2 2 2 2ISO-2022-JP ASCII escape sequencehackvertor12/11/2024XSS1 1 1 1Impossible lab framesetrenniepak11/27/2024HTML0⚠ Browser differences 50.7k 50.7k 50.7k 50.7kFind WAF bypass for eval contextelieehel11/22/2024JS0 1 1 1 1Characters transformed when using lowercasehackvertor11/18/2024JS0 10 10 10 10Characters transformed when using uppercasehackvertor11/18/2024JS0⚠ Browser differences 2.1k 1 2.1kChars in href that will not default to full URLjoaxcar11/16/2024XSS0 29 29 29 29Non-standard characters that break JSON.parse()DreyAnd11/15/2024JS1⚠ Browser differences 4 3 4HTML elements that inherit properties which return the full URL0x999-x11/14/2024XSS0⚠ Browser differences 1 1 1 17URL scheme separator alternativessimoneonofri11/14/2024JS1 1 1 1Characters that can be between < and script>m10x11/12/2024HTML0 62.5k 62.5k 62.5k 62.5kCharacters that cause the backslash to be consumed with GBK charsethackvertor11/7/2024XSS0 7 7 7 7Characters that close or encapsulate HTML attribute valuesola45611/5/2024XSS1 9 9 9XSS vectors that consume tagY4tacker11/5/2024XSS1 19 19 19HTML tags and attributes that can be used to access the URL0x999-x11/4/2024XSS1Found 253 recordsPage 5 of 13«12345678910»
