Taking control of the user's browser with BeEF-XSS