It's a shame that the actual attack mechanism doesn't seem to be detailed on the github repo, and the link to the article is dead.