Παρουσίαση με Ετικέτες

• C#
• Web

ASP.NET Security Vulnerability Or Not
20 Σεπτεμβρίου 10 12:36 μμ | spantos | 0 σχόλια   

Last week two security researchers, Thai Duong and Juliano Rizzo, have discovered a bug in the default encryption mechanism used to protect the cookies normally used to implement Forms Authentication in ASP.NET. Using their tool (the Padding Oracle Exploit Tool or POET), they can repeatedly modify an ASP.NET Forms Authentication cookie encrypted using AES and, by examining the errors

Διαβάστε περισσότερα »

Δημοσίευση στην κατηγορία: Web, ASP.NET, C#, Security