6Uses CSP violations to determine if external resources have been requested. This fuzzes characters before the src attribute.
<img $[chr]src=https://fuzz.shazzer.co.uk/$[rand]?$[i]><img 0x09src=https://fuzz.shazzer.co.uk/f02jsczob6p?9><img
src=https://fuzz.shazzer.co.uk/o7c20w3wtdb?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/94imb312grg?12><img 0x0Dsrc=https://fuzz.shazzer.co.uk/nffpxlrblk?13><img src=https://fuzz.shazzer.co.uk/cj66fu43nyj?32><img /src=https://fuzz.shazzer.co.uk/4tq441zqatg?47>