Uses xss-demo-server for hacked form post