Attributes that are also DOM properties

This vector enumerates HTML attributes and discovers if they have a corresponding DOM property.

Created by: Gareth Heyes

Created on: 4/30/2024, 9:17:50 PM

Updated on: 5/18/2024, 9:38:58 AM

Vector type: XSS

Template used:
<div id=x $[data1]=x></div>

Code used after fuzz:
if(document.getElementById('x')['$[data1]'])log('$[data1]')

Your browser was detected as:

Detecting... Detecting...

Fuzz results:

Chrome 124.0.0.0

Results

Found 11

Data
align

Data
autocapitalize

Data
hidden

Data
id

Data
lang

Data
role

Data
slot

Data
spellcheck

Data
style

Data
title

Data
translate

Firefox 125.0

Results

Found 10

Data
align

Data
autocapitalize

Data
hidden

Data
id

Data
lang

Data
role

Data
slot

Data
style

Data
title

Data
translate

Safari 17.4

Results

Found 10

Data
align

Data
hidden

Data
id

Data
lang

Data
role

Data
slot

Data
spellcheck

Data
style

Data
title

Data
translate