Attacking AJAX: Black Hat Presentation

It is an old one but the idea still applies :P

http://www.isecpartners.com/files/iSEC-Attacking_AJAX_Applications.BH2006.pdf

For More on Ajax Hacking, go to:
http://xssworm.blogvis.com/category/ajax-hacking/