cssexfil simple demo to extract value attribute via style injection [works in chrome] How to run install python3 and the flask package run main.py $ python3 main.py visit http://localhost:9000 check the python console for the token