You can read the Proof-of-Concept code at https://hackerone.com/reports/434763. I didn't make a video, sorry.