Get the Whitepaper called Opening Intranets to attacks by using Internet Explorer. This document covers the topic of hacking Intranet websites through various unconventional means. Technical details shed light on the impact of default security configuration settings within Internet Explorer that can be leveraged to attack internal Intranet websites remotely (from the Internet as well as remote users on the same LAN segment).
You can download it from the following link: https://packetstormsecurity.com/files/download/76420/HackingIntranets.pdf
Source: https://packetstormsecurity.com/files/76420/Opening-Intranets-To-Attacks-By-Using-Internet-Explorer.html