A lightweight HTTP Server that exploits XSS victim's session