HI,
a confortable way is the showcode.asp file. If they have a IIS standard installation and didn't deleted the sample files you can use it http://www.page.xxx/Msadc/Samples/Selector.../../thefile.asp
And look also for the unicode exploit. To know more about unicode have a look on this thread http://www.astalavista.net/member/newsshow.php?id=652
Also, follow this tute, and see where it gets you...
http://www.securingiis.com/docs/Cribbing_Perl_code.doc




