Uses CSP violations to determine if external resources have been requested. This fuzzes characters before the src attribute.
<img $[chr]src=https://fuzz.shazzer.co.uk/$[rand]?$[i]><img 0x09src=https://fuzz.shazzer.co.uk/hz12y3o1b6u?9><img
src=https://fuzz.shazzer.co.uk/fsvvp2w8oj4?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/ypv3k120h?12><img
src=https://fuzz.shazzer.co.uk/od0s01rz7q?13><img src=https://fuzz.shazzer.co.uk/nirixqngpkh?32><img /src=https://fuzz.shazzer.co.uk/x4u76l2is8n?47><img 0x09src=https://fuzz.shazzer.co.uk/g9h69ae9l1c?9><img
src=https://fuzz.shazzer.co.uk/uv9z8kvzzc?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/px11uj53im8?12><img
src=https://fuzz.shazzer.co.uk/qa5v03ie1c?13><img src=https://fuzz.shazzer.co.uk/3h9yqoeb2i8?32><img /src=https://fuzz.shazzer.co.uk/i2luu6816un?47><img 0x09src=https://fuzz.shazzer.co.uk/4iuveay5v9y?9><img
src=https://fuzz.shazzer.co.uk/3bnc8ibr3v?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/h173sf4z15n?12><img
src=https://fuzz.shazzer.co.uk/pi19w1ns5k?13><img src=https://fuzz.shazzer.co.uk/0w676nqo41er?32><img /src=https://fuzz.shazzer.co.uk/7siur3suh0y?47><img 0x09src=https://fuzz.shazzer.co.uk/u6fg8u1f3sb?9><img
src=https://fuzz.shazzer.co.uk/8mzgqxmww9c?10>