Attack demonstration - hacking XBOX online and live accounts with DOM based XSS
For more hacking stuff, check out my twitter: / haxel0rd
Proof of concept on how to turn a simple XSS into an actual attack for hacking xbox and live accounts. Feel free to ask questions in in the comment section. Microsoft has fixed the vulnerability by now (timeline ranges from: 15. - 30. June 2018).