does anyone have a pointer to any sample scripts for exploiting the cgi-bin/phf vulnerability? cheers, -paul