Collaborate Disseminate
I have an intranet site, hosted locally within my organisation. The same site also exposes some data through various web services. It’s written using ASP.NET MVC 5 and WebAPI 2.
At the moment users can login to the website u… Continue reading Issuing Personal Access Tokens for my APIs
I have 2 fields a label and a Textbox.
Q1. HTML encoding should be done while saving data into database or while displaying in the aspx page?
Q2. HTML encoded label text is displayed properly in browser like as asd < pqr… Continue reading HTML encoding for Textbox in asp.net for security
So I’m on an engagement and discovered an XXE injection point in a peculiar place on a ASP.NET app that I can’t seem to get my head around. One of the post parameters controls what “form” the rest of the data is sent to, and … Continue reading XXE injection in root node of XML document
I am testing ASP.NET application, where session id (ASP.NET_SessionId) is not renewed after login. Actually it is renewed when I use browser, on the login page server sends:
Set-Cookie: ASP.NET_SessionId=; expires=Sun, 25-Ju… Continue reading Session Fixation in ASP.NET
So I’m am trying to send POST data to this aspx webpage for a username and login. Their IDs are ‘ContentPlaceHolder_Username’ and ‘ContentPlaceHolder_Password’ and their names are ‘ctl00$ContentPlaceHolder$Username’ and ‘ctl0… Continue reading What can I do to manipulate POST data?
I am currently performing a secure code review of Fortify reported issues and segments of code flagged relates to current session state being stored in memory.
By default, the framework .NET automatically stores all HttpSess… Continue reading String Serialization i .NET
I am confused about differences between those two solutions from OWASP ASP.NET Web Froms Guidance
Solution one:
While viewstate isn’t always appropriate for web development, using it
can provide CSRF mitigation. To mak… Continue reading Two solutions for CSRF on OWASP for ASP.NET WebForms
I’ve found a blind Xml External Entity (XXE) attack against a SAML infrastructure while on a client engagement but it has been giving me fits trying to exploit it earlier. I can construct a simple XXE:
<?xml version="1.0" … Continue reading Attack path alternatives for XXE
I have an asp.net web app that generates emails when users perfrorm actions…these emails are generally notifications to other users that they should see/do something. The users can be internal to the company, or external (s… Continue reading How to securely store user-specific mail server credentials at the server side of a web application
I managed to find a vulnerability in a so-called friend of mines website and I want to show him that his website is vulnerable to data extraction.
When I use something like yes’)– as post I get the following debug info:
… Continue reading How to extract data using SQL injection on a vulnerable ASP.NET application?