see http://weblogs.asp.net/despos/archive/2004/12/13/281200.aspx and http://www.nikhilk.net/Entry.aspx?id=48 This is the kind of stuff that I would like to add a demo in our new dotnet server. Any volunteers to create a nice GUI around these vulnerabilities? Dinis