Collaborate Disseminate
In ASP.Net, the normal way of encrypting an object ( as an exmaple a user cookie in the server side ) is read the shared key located in the machine.config file. The machine config file contains following config entries.
<… Continue reading ASP.Net usage of the Machine.config file
In ASP.Net MVC I need to prevent any redirect attacks in my code. As an example I need to prevent if there is requests are being made outside from my domain. It would be great if someone can tell me how can do it in my code. … Continue reading ASP.Net Prevent URL Redirect attack
Background
In a normal bare metal hosting (IIS) we can use Integrated Security(eg : With AD) and hence, the config entry do not contain the connection string’s plain text password. Or we can encrypt the connection string … Continue reading ASP.Net Secure Connection String in Cloud Hosting
I am looking to rent a VPS server to host a game server, MySQL database and an ASP.NET site on it. A Windows server is too expensive for me but Mono-Project for Ubuntu does everything that I need it to do. Question is – is it… Continue reading Is it safe and secured to use Mono-Project for Ubuntu to run a ASP.NET with a MySQL database?
“High risk” exploit patch was issued in May of 2016. Continue reading Ohio Gov. Kasich’s website, dozens of others defaced using year-old exploit
I need help with securing cookies for my web application. It’s deployed in IIS and is built in ASP.NET MVC.
These are the things that I need to get more information about
Is the Sites folder in IIS Manager also a virtual d… Continue reading Information about securing cookies with path attribute with respect to ASP.NET and IIS
I notice that the default ASP.NET Core Identity templates ask for email address after the reset email notification link has been followed (i.e. the “choose a new password” form in the ResetPassword.cshtml view).
Why would ha… Continue reading ASP NET Core Identity password reset form prompts for email address
I’m developping a web application which will be communicating with a server over WebAPI. The server side will be on Azure and the client side will be on custom hosting with a JavaScript application (for example with ReactJS)…. Continue reading User authentication in JavaScript application
I’m developing/hosting an Asp.Net IIS Website on AWS. I have added StackExchange.Exceptional, and in the first days, I get exceptions about attempts to access pages like:
/CFIDE/administrator/
and
/muieblackcat/
I dis… Continue reading How to defend against web server security scanners? [closed]
Right now I’m working as a software development leader in my enterprise.
Here’s the main issue of everything. A software developer that works with us. There has been some rumours about this user sharing/developing software f… Continue reading Secure compiled .NET source code applications ASP.NET and Windows Forms