Get the Whitepaper called Exploiting Web 2.0, Real Life XSS-Worm.
You can download it from the following link: https://packetstormsecurity.com/files/download/74704/xss-worm.pdf
Source: https://packetstormsecurity.com/files/74704/Exploit-Web-2.0-Real-Life-XSS-Worm.html