viewstate-security-workshop

Taller de Seguridad de Viewstate Este repositorio es para el taller Pruebas de ASP.NET ViewState con YSoNet YSoSerial.NET. Lectura recomendada: Explotando la deserialización en ASP.NET mediante ViewState Herramientas recomendadas para resolver los laboratorios cuando el laboratorio haya sido...

CVE-2025-30406

CVE-2025-30406 PoC de Exploit de ViewState Resumen Este es un script de Prueba de Concepto PoC que demuestra una explotación de deserialización de ViewState para CVE-2025-30406 en aplicaciones ASP.NET. Utiliza ysoserial para generar un payload malicioso de ViewState y lo envía a una URL...

AspDotNetWrapper-Edited-

AspDotNetWrapper for test machine keys viewstate in ASP.NET download clone and unzip file in windows Used root@kitploit: AspDotNetWrapper.exe --keypath MachineKeys.txt --encrypteddata --decrypt --purpose=viewstate --modifier= --macdecode replace the to viewstate= parameter value in the source...

CVE-2026-26335-Calero-VeraSMART-RCE

👤 Author Mohammed Idrees Banyamer Security Researcher GitHub: https://github.com/mbanyamer Instagram: https://instagram.com/banyamersecurity CVE-2026-26335 - Calero VeraSMART ViewState RCE Exploit 📌 Description...

EUVD-2019-8731

Malware in sbrugna...

Checkbox Survey 6.12 <= 6.18 RCE

Checkbox Survey is an ASP.NET application that can add survey functionality to a website. Prior to version 7.0, Checkbox Survey implements its own View State functionality by accepting a VSTATE argument, which it then deserializes using LosFormatter. Because this data is manually handled by the...

Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability

Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey, perform cross-site-scripting XSS attacks, compromise the ASP.NET ViewState,...

CVE-2019-19092

ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code MAC. Alterations to Viewstate might thus not be noticed...

Telerik Web UI Information Disclosure (CVE-2017-9248)

A security bypass vulnerability exists in Telerik Web UI. Successful exploitation of this vulnerability can lead to cross-site scripting, arbitrary file uploads and downloads, leak of MachineKey and compromise of the ASP.NET ViewState on the affected system...

Telerik Web UI contains cryptographic weakness

Overview The Telerik Web UI, versions R2 2017 2017.2.503 and prior, is vulnerable to a cryptographic weakness which an attacker can exploit to extract encryption keys. Description CWE-326: Inadequate Encryption Strength - CVE-2017-9248The Telerik.Web.UI.dll is vulnerable to a cryptographic...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...