> For the complete documentation index, see [llms.txt](https://heinosass.gitbook.io/leet-sheet/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/css-injection.md).

# CSS Injection

Functionally the same as [XSS](/leet-sheet/web-app-hacking/user-attacks/xss-cross-site-scripting.md), but with CSS.

You can steal CSRF tokens by bruteforcing using this method.

{% embed url="<https://www.curesec.com/blog/article/blog/Reading-Data-via-CSS-Injection-180.html>" %}