Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with asp.net
Search options answers only
not deleted
user 975
ASP.NET is a Web application framework developed and marketed by Microsoft to allow programmers to build dynamic Web sites, Web applications and Web services.
3
votes
Is this a ViewState attack?
Providing a ViewState of -1' will cause an exception on some systems. Based on the exception message I don't believe this issue is exploitable. However the attacker may be profiling your server for …
- 47.3k
3
votes
Web Services and WSDL Documentation Protocol
It is possible to keep the WSDL private, or keep it cached on the client. However, this is just (in)security though obscurity. WSDLs are useful for generating test cases against your web service, …
- 47.3k
8
votes
Accepted
ASP.NET Web API and potential XSS
This condition was probably not an exploitable XSS vulnerability for most applications. This is more likely a "defense in depth" filter to prevent programmers from unintentionally causing problems.
…
- 47.3k
3
votes
Accepted
How should I mitigate the XSS vulnerabilities in KnockoutJS described at mustache-security?
The attack described in mustache-security describes a bypass of a Web Application Firewall (WAF) that try to prevent XSS by dropping HTTP requests that contain <script> tags. If a page is using Knoc …
- 47.3k
12
votes
Accepted
How reliable is ASP.NET's Request Validation feature?
As a penetration tester I have found that "Request Validation" fails in a number of situations. Developers tend to believe that "Request Validation" == "magic", and it protects them completely from …
- 47.3k
2
votes
Accepted
Missing Secure Attribute in Encrypted Session (SSL) Cookie Recheck
Cookies can be set multiple times which can result in insecure cookie attributes (Secure and HTTPOnly) and race conditions. Tools can produce false positives, what really matters is if the browser i …
- 47.3k
4
votes
Accepted
Payment security on Android App
Hacking is creativity. Applications are complex and when an attacker can look at the entire application he can see interesting ways of abusing it. In the light of a few sentences explaining some vagu …
- 47.3k
3
votes
Accepted
Comparison between Data Encryption Tools and Data Sanitization Tools
Use a parametrized query library like SQLi, adodb, or PDO. If used properly this makes SQL injection impossible.
- 47.3k