Get the Whitepaper called Token Hijacking with XSS.
You can download it from the following link: https://packetstormsecurity.com/files/download/95822/token-hijacking.pdf
Source: https://packetstormsecurity.com/files/95822/Token-Hijacking-With-XSS.html