All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
XML Parsing
XSS Execution
Login
Home
Vectors
All vectors
Categories
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Home
Vectors
All vectors
Categories
Browser diffs
RSS
Network
Tools
Cheat sheet
Unicode table
Dynamic template
Blog
Blog home
RSS
Help
Tickling...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
⚠ Browser differences
50.7k
50.7k
50.7k
Find WAF bypass for eval context
elieehel
11/22/2024
JS
0
1
1
1
1
Characters transformed when using lowercase
hackvertor
11/18/2024
JS
0
10
10
10
10
Characters transformed when using uppercase
hackvertor
11/18/2024
JS
0
⚠ Browser differences
2.1k
1
2.1k
Chars in href that will not default to full URL
joaxcar
11/16/2024
XSS
0
29
29
29
29
Non-standard characters that break JSON.parse()
DreyAnd
11/15/2024
JS
1
⚠ Browser differences
4
3
4
HTML elements that inherit properties which return the full URL
0x999-x
11/14/2024
XSS
0
⚠ Browser differences
1
1
1
17
URL scheme separator alternatives
simoneonofri
11/14/2024
JS
1
1
1
1
Characters that can be between < and script>
m10x
11/12/2024
HTML
0
62.5k
62.5k
62.5k
62.5k
Characters that cause the backslash to be consumed with GBK charset
hackvertor
11/7/2024
XSS
0
7
7
7
7
Characters that close or encapsulate HTML attribute values
ola456
11/5/2024
XSS
1
9
9
9
XSS vectors that consume tag
Y4tacker
11/5/2024
XSS
1
19
19
19
HTML tags and attributes that can be used to access the URL
0x999-x
11/4/2024
XSS
1
2
2
2
HTML tags that can clobber the credentials part of the URL
0x999-x
11/4/2024
XSS
1
⚠ Browser differences
45.4k
56.7k
45.4k
62.5k
Characters that cause the backslash to be consumed with a big5 charset
hackvertor
11/1/2024
XSS
0
63.3k
63.3k
63.3k
63.3k
Differences between escape vs encodeURIComponent
hackvertor
10/15/2024
JS
1
1
1
1
< removal bypass
Device1306
10/9/2024
HTML
0
1
1
1
Entities in-between square brackets that close cdata
hackvertor
10/8/2024
XSS
1
1
1
1
1
Characters in-between square brackets that close cdata
hackvertor
10/8/2024
XSS
0
1
1
1
Includes Validation Chars Allowed
Simpsonpt
10/8/2024
JS
1
2k
2k
2k
2k
Characters that cause exceptions when URL encoded
hackvertor
10/3/2024
JS
2
Found
245
records
Page 5 of 13
«
1
2
3
4
5
6
7
8
9
10
»