Sounds like creating an url like aspnet_client/admin.php returning a WebObjects header might be a good hobby
Add in a zip bomb or two?
alt Hacker News
Add in a zip bomb or two?