For those remotely interested in the BlackHat 2010 Conference, see a list of all materials presented at this years event: http://it.toolbox.com/blogs/securitymonkey/blackhat-2010-presentations-materials-40354 Knoc
Link include very huge stuff related this and from all of that this session will show how to steal, in Microsoft Internet Information Services, the user account credential, how to get access to this web applications impersonating the connection and taking advance of the web server credentials and how to connect against internal databases servers in the DMZ without credentials.