Let there be magic !
Scripts that will capture user inputs, save screenshots, take snapshots...
Anyway to retrieve information related to the user or its behavior.
Perform network and system operations from the browser executing the script.
From system fingerprinting to network DDoS via portscans and network info collection.
Anything that can be used to alter users browsing experience, or take over the injected browser.
Shells, local storage leaks and corruption, forced downloads, CSRF, token theft and more !