If you want to play with custom javascript payloads I created a website that lets you set one. http://dnsrebindtool.43z.one/