I'm in your browser, pwning your stuff
Advanced Chrome extension exploitation
Html5: something wicked this way comes - HackPra