Questions tagged [asp.net]

ASP.NET is a Web application framework developed and marketed by Microsoft to allow programmers to build dynamic Web sites, Web applications and Web services.

Filter by
Sorted by
Tagged with
0
votes
1answer
2k views

Session id remain same after and before logging in asp.net application

Before logging in to the asp.net application, i checked the headers and there was already a session id in cookie header cookie: ASP.NET_SessionId=3de0es3brpfbcmvkzhkidsmt And when i logged in to the ...
1
vote
0answers
38 views

Hardening ASP.NET against session fixation: Should I change the session ID despite the additional Auth cookie?

Situation I am the responsible developer for an ASP.NET application that uses the "Membership" (username and password) authentication scheme. I am presented with the following report from a ...
0
votes
0answers
22 views

Tracing Web Requests to Compiled ASP.Net Code [closed]

I working on reverse engineering a ASP.NET web application for a security assessment. I'm using dnSpy to try to work through the code base and its entry points. I can not figure out where the URLs ...
0
votes
0answers
27 views

Telerik Script not working correctly?

I found that a website is using a version of telerik web ui that may be vulnerable to cve-2017-9248. However when i use the python script with command python script.py -k https://www.website.com/...
-1
votes
1answer
106 views

XSS protection - escape symbols

Lets say we have private math/developers forum website made with asp.net. Users can post text-messages in topics. Based on OWASP articles we should escape symbols like: ' " < > / to prevent XSS ...
1
vote
0answers
57 views

Should HTTP_COOKIE, __RequestVerificationToken, _RequestVerificationToken and .ASPXAUTH be kept secret?

Inside our ASP.NET MVC-4 web application, we have added the Elmah error logging, and I wrote a code to prevent the Elmah from exposing the user password inside the error file. But inside the Elmah ...
3
votes
1answer
12k views

Enable X-XSS-Protection in an ASP.Net MVC Web app

Most of the browsers supports the X-XSS-Protection header to prevent XSS atatcks. How we can enable this header in a ASP.Net MVC application? Do we need to enable it in the application or do we need ...
0
votes
1answer
50 views

How to implement Anti-CSRF method? [closed]

I have created a ASP.NET project and I want to implement Anti-CSRF method in my project. How to do that?
0
votes
0answers
61 views

Is it secure to prevent CSRF in API without using CSRF cookie (only CSRF token sent in header of ajax requests)?

There is a standard method of preventing a CSRF attack by comparing a value in a special cookie (that is posted automatically with each request) and some value that is coming either in form post (from ...
2
votes
3answers
688 views

Why are ASP.NET form authentication cookies deleted only on client side if client side can't be trusted?

ASP.NET documentation says: FormsAuthentication.SignOut() Removes the forms-authentication ticket from the browser Why is the cookie not invalidated at the server as well? It would be easy ...
0
votes
1answer
91 views

Get client ip address that is not spoofed

I am using the following source code to get a client IP address, Public Shared Function GetIPAddress() As String Dim context As System.Web.HttpContext = System.Web.HttpContext.Current Dim ...
2
votes
1answer
332 views

How could ASP.NET forms authentication session leak into a different site?

We're dealing with a vulnerability where a forms authentication from one site can be used within a separate site. I can't figure out how is IIS or ASP.NET allowing this to occur Steps: Login to ...
0
votes
1answer
77 views

PHP code execution attempts on an ASP website

I found multiple PHP code execution attempts on my web server, which is running on asp. What happens when one attempts to execute php code on an asp web server? Will this create an impact on the ...
0
votes
0answers
83 views

Asp.NET project .dll is recognized as Ludicrouz virus

I was just working on this project and suddenly Windows Defender triggered a warning of virus... the source was the project itself. Ran the Avira antivirus and found nothing. Removed the C: drive ...
2
votes
3answers
5k views

ASP.NET Web Forms is not generating a new session ID if a user logs out and logs back in

ASP.NET Web Forms is not generating a new session ID if a user logs out and logs back in. Is this a major security risk? We're using SSL.
2
votes
2answers
7k views

Bypass Asp.Net 4.6 “A potentially dangerous Request.QueryString value was detected from the client”

I'm testing an application where the application does not handle special characters but request validation in ASP.NET picks it up and throws an exception. There have been some different ways to ...
3
votes
1answer
4k views

Two solutions for CSRF on OWASP for ASP.NET WebForms

I am confused about differences between those two solutions from OWASP ASP.NET Web Froms Guidance Solution one: While viewstate isn't always appropriate for web development, using it can provide ...
0
votes
0answers
171 views

How to store SSN in asp.net web-based application on a short-term basis?

After scouring the web to find countless similar questions, I still find it important enough to ask based on my client's specific requirements. Now I know most if not all are not a lawyer, but if you'...
0
votes
0answers
265 views

Get all active ASP.NET Session ID's as an attacker

When a user logs into my ASP.NET application an ASP.NET_SessionId is assigned to them. This means that, potentially, an attacker could impersonate a user by using their SessionId in requests (sending ...
5
votes
2answers
897 views

Vulnerable framework and IIS server version's are being displayed in an error page of a 3rd party application

As security tester, I need to report and justify that a security misconfiguration in a 3rd party application is a risk to us. Following is the scenario: 1.) There is a 3rd party application which ...
1
vote
1answer
137 views

How to convert this .NET cryptography code to openssl command?

how to sign the message with the private key of the signer using openssl command line tool to get the same result as the code below? using System.Security.Cryptography.Pkcs; using System.Security....
2
votes
1answer
121 views

Unauthorized API Access Without Key Header

In order to test the security of my API, I want to act as sort of an attacker in order to try and gain access to my own API without an API key. In order for me to send requests to this endpoint, I ...
4
votes
1answer
10k views

ASP.NET Web API and potential XSS

I'm wondering if my ASP.NET Web API had an XSS vulnerability as my controller didn't have a method to handle the default GET call. Without the GET method being handled in the code a call to /api/...
2
votes
0answers
392 views

ASP.NET SOAP Service XXE

Is it possible to do any type of XXE in a service developed using default C# SOAP service framework? I ask because any type of XXE payload I try to add, even XML header, whatever I add before SOAP ...
22
votes
3answers
71k views

How to ensure that cookies are always sent via SSL when using ASP.NET on IIS 7.5?

Firesheep has brought the issue of insecure cookie exchanges to the forefront. How can you ensure that all cookie exchanges are forced to occur only via an SSL-secured connection to the server when ...
-1
votes
1answer
231 views

Local File Download(LFD) vulnerability exploit

I have found a arbitrary file download vulnerability in an asp.net application. I've downloaded the web.config and some other files. So what can i do with that "web.config" information ?(for example: ...
0
votes
1answer
154 views

I'm not sure if this Website is SQL Injectable

I think I found an SQL vulnerability; the request and response can be found below. I'm not sure because it is showing a normal error (it's in French) instead of showing an SQL error. I also tried to ...
2
votes
0answers
153 views

HTML Form to PDF vulnerabilities

I have a form where the user inputs data. On the back end, I'm taking some of that data and embedding it into a PDF using ActiveReports. I then display it back to the user and save a copy on our ...
0
votes
2answers
547 views

How to extract data using SQL injection on a vulnerable ASP.NET application?

I managed to find a vulnerability in a so-called friend of mines website and I want to show him that his website is vulnerable to data extraction. When I use something like yes')-- as post I get the ...
2
votes
0answers
46 views

Issuing Personal Access Tokens for my APIs

I have an intranet site, hosted locally within my organisation. The same site also exposes some data through various web services. It's written using ASP.NET MVC 5 and WebAPI 2. At the moment users ...
3
votes
0answers
152 views

String Serialization in .NET [closed]

I am currently performing a secure code review of Fortify reported issues and segments of code flagged relates to current session state being stored in memory. By default, the framework .NET ...
5
votes
4answers
2k views

“Forgot my password page” best practice

On a "forgot my password" page, is appropriate when user doesn't have an account to display the message "this account doesn't exist"? Or in the interest of security, should I display a success message ...
1
vote
1answer
361 views

attack path alternatives for XXE

So I've found a blind Xml External Entity (XXE) attack against a SAML infrastructure while on a client engagement but it has been giving me fits trying to exploit it earlier. I can construct a simple ...
4
votes
2answers
485 views

How to securely store user-specific mail server credentials at the server side of a web application

I have an asp.net web app that generates emails when users perfrorm actions...these emails are generally notifications to other users that they should see/do something. The users can be internal to ...
1
vote
1answer
153 views

How background services perform token based Api Authentication?

I am implementing JWT token based authentication for our WebAPI in order to restrict data access through the API (e.g. client sends username / password and the api provides a jwt token valid for x ...
0
votes
0answers
2k views

Prevention of host header injection in ASP.NET?

How can we mitigate host header injection in ASP.NET? I have already configured application binding in IIS and set static hostname but still, the vulnerability exists.
2
votes
1answer
462 views

How to effectively test for username enumeration risk?

I am responsible for some public-facing web applications, and I want to test these for the username enumeration risk as explained in Testing for User Enumeration and Guessable User Account (OWASP-AT-...
80
votes
2answers
38k views

Should I use AntiForgeryToken in all forms, even login and registration?

I'm running a rather large site with thousands of visits every day, and a rather large userbase. Since I started migrating to MVC 3, I've been putting the AntiForgeryToken in a number of forms, that ...
0
votes
0answers
305 views

ViewStateUserKey .NET CSRF protection

In a typical PHP web application you append a hidden CSRF Token in each form and this token is validated when the request is submitted in the server side. I am performing a penetration test in a .NET ...
0
votes
2answers
320 views

Is this a true CSRF attack?

I have been fixing a asp.net web forms application that has a number of vulnerabilities that were discovered by an outside pen testing firm. I have recently implemented a double submit cookie with ...
1
vote
2answers
752 views

Practical benefit of using SqlCredential vs username/password in connection string

Currently I'm using SQL Server Authentication with the username/password as part of the connection string for my web application. As far as I know this standard procedure within the .NET world and ...
0
votes
1answer
7k views

Is ASP.net More Secure than PHP in GENERAL? [closed]

In other words, my (long version) question is: Are developers able to get away with, more using ASP.net than PHP in terms of writing secure code for their apps? I ask this because ASP.net has many ...
2
votes
2answers
987 views

XSS issues for hidden fields in .NET

We have a .NET 4 web application with a few hidden form fields. When the site was tested for XSS vulnerabilities, these hidden fields were the first victims. How can we protect and safeguard our ...
1
vote
0answers
55 views

Is my website being checked for vulnerabilities or being attacked? [duplicate]

I have a website running on windows hosting with plesk 11 version and website is based on .net 4.5 by default PHP is also active for this website but is not being used. I have disabled PHP as i am not ...
1
vote
1answer
283 views

How can I detect if IETF TokenBinding is in use for bearer tokens?

Token Binding increases the security of traditional bearer tokens (cookies). This Blog describes that ASP.NET can use Token Binding. As a security consultant, I'd like to observe or detect that this ...
2
votes
1answer
150 views

Is AntiForgeryToken needed for newsletter subscription?

General recommendation is to include an anti-forgery token in all POST requests, but is it needed for email newsletter subscription form? Many single page scrolling sites have email subscription ...
0
votes
1answer
117 views

What attacks is my website subceptable to and how can I prevent them? [closed]

I am developing a website using this book. From my knowledge and from the book, the major issues that I would have to look out for are XSS, CRSF and SQL injection attacks. I have found that there is ...
-4
votes
1answer
152 views

Why isn't ASP.NET source code compiled before it is published?

Why doesn't Visual Studio compile the source code (.cs) automatically before publishing, since they know perfectly well that the end-product website is going public? (Unless you're just building the ...
3
votes
1answer
124 views

A security audit wants encypted user/pass for login in asp.net - this seems pointless or is it not?

We are using asp.net mvc, using forms authentication. Username and password is sent to the server with TLS with a strong secure certificate. Their justification for this: threat: "the web server uses ...
4
votes
2answers
4k views

Do you know any crawler/spider software, which is able to go through an ASP.NET site?

Do you know any crawler/spider software, which is able to go through ASP.NET application, not ASP.NET MVC, but the one full of __doPostBack JavaScript functions on every link/button/change event? If ...