File Smuggling with HTML & JS

First, you created a payload, and you need to publish it over a website. So, we should turn our payload to downloadable resources from the website.

You can find a good example below.

We'll work with HTML and JavaScript, which means we can write this page in many different versions.

If you are creating a phishing site you should consider browser compatibility. IE and other Modern Browsers may not support each other's API's.