XSS , HTML and JAVASCRIPT injections to create a realistic fake login.

As an enthusiast in xss injections I like to be creating new payloads, in this article I would like to share one of my creations that I really like, as such it is a fake login.

I know there are too many posts about creating a fake login to capture credentials, that’s why I like to share content and add a personal bonus.

In this case, the false login is created with 3 different types of injections, which are:

- Injection xss
- html injection
- javascript injection

The complete code that we are going to use is the following:

Full code to inject

Now we are going to analyze the code part by part to know what we are injecting

First we will analyze the part of the XSS injection:

XSS injection part

As you can see this is a simple alert

Now we will analyze the html injection