Sign in to victim; javascript:prompt(1);