Uses CSP violations to determine if external resources have been requested. This fuzzes characters before the src attribute.
<img $[chr]src=https://fuzz.shazzer.co.uk/$[rand]?$[i]><img 0x09src=https://fuzz.shazzer.co.uk/61ekz0txday?9><img
src=https://fuzz.shazzer.co.uk/ccwowfcked8?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/515g9nqhj6l?12><img
src=https://fuzz.shazzer.co.uk/wwsodh5wqsh?13><img src=https://fuzz.shazzer.co.uk/voel6zwsrk?32><img /src=https://fuzz.shazzer.co.uk/mhw0jygzwud?47><img 0x09src=https://fuzz.shazzer.co.uk/1t4vwejgkb4?9><img
src=https://fuzz.shazzer.co.uk/vr4m168w4gf?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/uxdnattoc5q?12><img
src=https://fuzz.shazzer.co.uk/wo2onz5wpqb?13><img src=https://fuzz.shazzer.co.uk/ztqn0cylzhn?32><img /src=https://fuzz.shazzer.co.uk/k08fb0fyi?47><img 0x09src=https://fuzz.shazzer.co.uk/0vke8fv9tki?9><img
src=https://fuzz.shazzer.co.uk/h0awt44kh5w?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/x3t8tmgjzbl?12><img
src=https://fuzz.shazzer.co.uk/43hb36hlm9b?13><img src=https://fuzz.shazzer.co.uk/xtbh6zwjq2k?32><img /src=https://fuzz.shazzer.co.uk/hvr8406exem?47><img 0x09src=https://fuzz.shazzer.co.uk/9irx7dlwj96?9><img
src=https://fuzz.shazzer.co.uk/zn98bnp1orn?10>