Lucene search

K
threatpostDennis FisherTHREATPOST:1109584452DBA30B86EF68E3277D4E39
HistorySep 17, 2010 - 5:48 p.m.

Demo of ASP.NET Padding Oracle Attack

2010-09-1717:48:52
Dennis Fisher
threatpost.com
156

0.974 High

EPSS

Percentile

99.9%

In this video, researchers Juliano Rizzo and Thai Duong demonstrate the technique they developed for stealing cryptographic keys for ASP.NET Web applications, enabling them to compromise virtually any app built on ASP.NET.

You can read the full story of their attack in this article, “Padding Oracle Attack Affects Millions of ASP.NET Apps.”