Uses CSP violations to determine if external resources have been requested. This fuzzes characters before the src attribute.
<img $[chr]src=https://fuzz.shazzer.co.uk/$[rand]?$[i]><img 0x09src=https://fuzz.shazzer.co.uk/i5wv2gux1k?9><img
src=https://fuzz.shazzer.co.uk/1xcs3p8dzft?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/qfn0vqvilvj?12><img
src=https://fuzz.shazzer.co.uk/acgi8e292om?13><img src=https://fuzz.shazzer.co.uk/6md06xfdthe?32><img /src=https://fuzz.shazzer.co.uk/sr2lj071h4e?47><img 0x09src=https://fuzz.shazzer.co.uk/og7ohsou9a?9><img
src=https://fuzz.shazzer.co.uk/9zmtx1c4ewq?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/2h5opyhdri6?12><img
src=https://fuzz.shazzer.co.uk/e12pxaq4anp?13><img src=https://fuzz.shazzer.co.uk/lw456y5v5pn?32><img /src=https://fuzz.shazzer.co.uk/jy12gff7m7?47><img 0x09src=https://fuzz.shazzer.co.uk/x6d3u0ubwvo?9><img
src=https://fuzz.shazzer.co.uk/aaod9kbeo8t?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/3fohbyxi1xl?12><img
src=https://fuzz.shazzer.co.uk/f8td9mn9v1t?13><img src=https://fuzz.shazzer.co.uk/caqddrmnypf?32><img /src=https://fuzz.shazzer.co.uk/pfn94ytnq8r?47><img 0x09src=https://fuzz.shazzer.co.uk/vgupyylv3rg?9><img
src=https://fuzz.shazzer.co.uk/vkb633b2oo?10>