Asp.net Video

Submit Video
Home » Videos » Asp.net

POET vs ASP.NET: DotNetNuke

  Shared By: cryptbe      Date: Sep 16      Category: Asp.net     
In this video we show how to use POET to attack the latest version of ASP.NET. The target application is DotNetNuke. The attack consists of two phases: 1. In the first phase, we use POET to extract DotNetNuke's secret keys, and use those keys to generate a cookie to login as a super user. The same technique can be used to attack _every_ ASP.NET application. 2. In the second phase, we use Cesar Cerrudo's Token Kidnapping attack to gain SYSTEM privilege on the Windows server hosting DotNetNuke. This research was done by Thai Duong and Juliano Rizzo. More information can be found at netifera.com

Didn't find what you were looking for? Find more on POET vs ASP.NET: DotNetNuke Or get search suggestion and latest updates.


Related Videos