IIS 5 cookie encryption password

["Serguey Forcade" <sergueyf () gmail com>]

Hi, I'd like to know if anyone knows of a paper that explains how to
extract the encryption password IIS creates when it starts up, and
uses to encrypt the session ID + random data in order to generate the
cookie value the users receives.

I'm interested in IIS 5.0.

Thanks.

-------------------------------------------------------------------------
Sponsored by: Watchfire

It's been reported that 75% of websites are vulnerable to attack. That's 
because hackers know to exploit weaknesses in web applications. 
Traditional approaches to securing these assets no longer apply. Download 
the "Addressing Challenges in Application Security" whitepaper today, 
and see for yourself.

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008fHF
--------------------------------------------------------------------------