Attacker Page

This page hosts a sandboxed iframe that reads your session via the null-origin CORS bypass.