Attacking the OAuth Protocol
dhavalkapil.com