This page will prompt you for your password if you have xss issue

<script>
if ( window.location !== window.parent.location ) {
      // The page is in an iframe
     try{
    if (document.location.href.indexOf("noprompt") <0) {
        prompt("External prompt from test.ebfe.pw triggered within iframe","password");}
}catch{}

} else {
      // The page is not in an iframe
    try{
    if (document.location.href.indexOf("noprompt") <0) {
        prompt("External prompt from test.ebfe.pw","password");}
}catch{}

}
//try{console.log(window.frames);}catch{}
try{console.log(window.parent);}catch{}
//try{console.log(window.top);}catch{}
try{
    if (window.parent.document.body.innerHTML.indexOf("Added by external iframe") < 0){
        window.parent.document.body.innerHTML += "<br>Added by external iframe";
    }
}catch{
    alert("external iframe can't modify the parent document")
    }
//    try{alert(window.parent.document.body.innerHTML)}catch{};

</script>