IIS application pool exploit

What? That’s what I said too when I first discovered the exploit. I didn’t think it was so easily possible to extract usernames and passwords from IIS, but it is. I contacted Microsoft abo...