asp.net – Oracle padding exploit – 如何下载web.config？

有人可以解释他们是如何做到这一点,甚至提供一个链接到我可以用来测试我的网站的工具.我发现这部分攻击的官方解释确实缺乏.

The attack that was shown in the
public relies on a feature in ASP.NET
that allows files (typically
javascript and css) to be downloaded,
and which is secured with a key that
is sent as part of the request.
Unfortunately if you are able to forge
a key you can use this feature to
download the web.config file of an
application (but not files outside of
the application).