
will uh generate our custom uh XSS code. Um so this one in you involves a user interaction, so actually a user has to to load the JavaScript, but you will see that they will not see it. Um so we're listening back for the exfiltrated data with an HTTP server. And then we launch the the mission control system. Uh we we load a new uh payload file.
And then we have the the funny thing about this. So there is like a script viewer. You can actually execute custom scripts written in JavaScript. But it doesn't show the JavaScript. If you hide it. Um So our our payload is now actually already executed. And yeah, we we got the passwords. file. Um just just an example. So um
Yeah.