css token extractor
targeted
blind
configuration
type
Anchor (<a href="...">)
Hidden input (<input type="hidden">)
selector
attr
name
start
end
length
window
4 chars — ~99% single guess at 40 chars, ~4.5 MB CSS
3 chars — ~300 KB CSS, longer tokens may give candidates
apply
payload
Copy as HTML for test
Copy as text for exploitation
copy
sample token
-
1. recon
input[value]
meta[content]
a[href] / form[action] params
data-* attributes
Copy as HTML for test
Copy as text for exploitation
copy recon payload
Wordlist probes for field names, which element can host the requests, and whether each value is lowercase hex. Inject it, then pick fields below.
2. discovered fields
waiting for recon...
4 chars — accurate, ~7 MB/field
3 chars — ~0.5 MB/field, candidates
Copy as HTML for test
Copy as text for exploitation
copy extract payload
blind sample tokens
-
3. extracted tokens
waiting for extraction...
refresh
reset
test area
paste css here to test extraction
extracted token
waiting for extraction...
refresh
reset