XSSOR：方便XSS与CSRF的工具，http://evilcos.me/lab/xssor/