Billy Rios' (@xssniper) write up of own to exploit a Zeus C&C server: http://bit.ly/akpikD [this could be fun]