Steal Access Token

https://whitton.io/articles/stealing-facebook-access-tokens-with-a-double-submit/

https://whitton.io/articles/obtaining-tokens-outlook-office-azure-account/

https://hackerone.com/reports/114169

http://homakov.blogspot.com.eg/2014/02/how-i-hacked-github-again.html?m=1

https://hackerone.com/reports/108113

https://hackerone.com/reports/151058

https://hackerone.com/reports/143717

http://blog.intothesymmetry.com/2014/04/oauth-2-how-i-have-hacked-facebook.html

http://blog.intothesymmetry.com/2016/11/all-your-paypal-tokens-belong-to-me.html?m=1