https://justice-reaper.github.io/posts/XSS-Lab-23/
Exploiting cross-site scripting to capture passwords - Justice-Reaper