Bryan Sullivan from Spi-Dynamics submits this paper outlining five of the worst offenders of misconfigurations of application security in the ASP.NET world as well as five more misconfigurations that impact Web Forms authentication in ASP.NET as well.
