The Spanner logo
    • Home
    • Blog
      • Blog home
      • RSS
    • Login
    • Home
    • Blog
      • Blog home
      • RSS
    • Login
    The Spanner logo

    The Spanner
    Web security blog

    Made by Gareth Heyes
    Follow me on Twitter: @garethheyes

    Javascript for hackers!

    Hackvertor logo
    Shazzer logo
    My Github account
    Recent posts
    Introducing Feedworm: A Privacy-First RSS Reader That Lives in DevToolsSpeedy RSVP extensionAutoVaderHackvertor history and tag finderShadow Repeater v1.2.3 releaseBurp Hackvertor v2.1.24 releaseHacking roomsXSSing TypeErrors in SafarivalueOf: Another way to get thisMaking the Unexploitable Exploitable with X-Mixed-Replace on FirefoxThe curious case of the evt parameterCSS-Only Tic Tac Toe ChallengeRewriting relative urls with the base tag in SafariBypassing DOMPurify with mXSSNew IE mutation vectorHow I smashed MentalJSMentalJS DOM bypassAnother XSS auditor bypassXSS Auditor bypassBypassing the IE XSS filterUnbreakable filterMentalJS bypassesmXSSJava SerializationBypassing the XSS filter using function reassignmentRPOSandboxed jQueryX-Domain scroll detection on IE using focusEpic fail IEnew operatorDecoding complex non-alphanumeric JavaScriptHacking FirefoxDOM ClobberingBypassing XSS AuditorThe evolution of codeNon-Alpha PHP in 6-7 charsetTweetable PHP-Non AlphaMentalJS for PHPOpera x domain with video tutorialSandboxing and parsing jQuery in 100ms

    New Hackvertor upgrade

    By Gareth Heyes (@hackvertor)

    Published 15 years 7 months ago • Last updated March 22, 2025 • ⏱️ 3 min read

    ← Back to articles

    It's been a while for a Hackvertor update, you might have noticed that the old one hasn't changed in a while. This is because I've finally moved it over to the new one with a bunch of new features. I'll give you a run down of the new tags and features I've added. I still have to create the DOM integration using my DOM api I wrote a while ago but this shouldn't be long, it will allow cool things like building Hackvertor apps that become part of the interface and create real time stuff like IM clients that read current logged in users. In other words Facebook for Hackers.

    New features

    <h4>Natural language conversion</h4>

    Sometimes it's a pain to add tags or find which ones you're after so I decided to create a simple natural language processor that allows commands like "Convert this to hex then octal and hash it with md5" and it will build the tags for you. You type into the natural language conversion box, then enter some input select the input if you like then instead of clicking the normal convert button you click the one in the natural language box. Other sentences samples include: "decode hex", "decode but I can't remember what it is", "please hash it with md5" you get the idea.

    <h4>New tags</h4>

    Unicode character lookup is pretty cool:- Enter some input and click unicode_lookup in web services and it will show information about the character. demo

    Perform js code on each piece of a string, this replaces the old functionality of hex2dec etc JS str

    Dom injection generator, takes the allowed characters inside the tag and builds a dom injection based on those characters:- Dom generator

    Find the coordinates of a location:- Find cords

    More of this stuff in the new "web services section".

    I've also started to create a SQLi section thanks to @lighos's excellent SQLi cheatsheet

    <h4>Execute some code</h4>

    There is also a new "execute" section which will call ideone's excellent API and execute code in various languages like assembler, perl, php, python, smalltalk, scheme even whitespace if you must.

    PHP Assembly

    <h4>Javascript console features</h4>

    I've also upgraded the inspector to use my astalanumerator along with some new button to "execute fresh javascript" this will allow you to call some javascript without retaining any variables that you have created. The output console will also keep a history of any javascript or html you've executed and save it to localStorage, this can be accessed by using the "<" and ">" to go forward and backwards in your history, pretty cool if you've copied and pasted something but the browser crashes or you forget to save it. It can be cleared by using the "clear history" button.

    There are other new tags but I didn't really want the blog post to go on forever, oh and if you think something is missing from the old one instead of moaning at me why not write the functionality back :P create some tags!

    ← Back to articles