Questions tagged [.net-security]

Not a stand alone tag. Use with any relevant language, project type and specific security tags. For questions relating to the programming aspects of .NET framework and security. For security questions that are not specific to coding, consider looking at https://security.stackexchange.com/.

Not a stand alone tag. Use with any relevant language, project type and specific security tags. For questions relating to the programming aspects of framework and security. For security questions that are not specific to coding, consider looking at Information Security Stack Exchange.

For more information about see the docs at Security in the .NET Framework

48 questions
1
vote
1 answer

Do I need to validate JWT tokens in asp.net core 2 REST API?

I have the following code in my asp.net core REST API configuration: services .AddAuthentication(options => { options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme; }) .AddJwtBearer(options => { options.Authority…
Allan Xu
  • 7,998
  • 11
  • 51
  • 122
1
vote
0 answers

Control flow guard C#

I've read an article about Control Flow Guard (https://learn.microsoft.com/en-us/windows/desktop/secbp/control-flow-guard). I'm tried to enable it in my C# application, but the way how it was done in article not working in my Visual Studio 2017. Can…
Hawex
  • 133
  • 13
1
vote
1 answer

C# - .NET 4.0 - That Assembly does not allow partially trusted callers

When running from a network share, my application throws the following exception: That assembly does not allow partially trusted callers. My application references two DLL files: BitFactory.Logging.dll FileHelpers.dll I'm not sure which one it is…
Nasir
  • 10,935
  • 8
  • 31
  • 39
1
vote
1 answer

How to use thumbprint for security?

I am using RSACryptoServiceProvider for security. I built the code using a self signed certificate for testing purposes. not user has provided us with the actual thumbprint. I was expecting to get a certificate instead ? how do i use the…
grace
  • 253
  • 1
  • 5
  • 17
1
vote
1 answer

Assembly MOV Instruction

Hi guys im working on a CTF challenge and don't quite understand this asm command: mov %edx,0x20(%esp,%eax,4) Im assuming its: move $edx into (0x20 + $esp + $eax + 4) However when I checked this with gdb it isn't correct. Anyone mind explaining…
Meraj Patel
  • 129
  • 6
1
vote
2 answers

Installing VSTO Outlook addin for All Users to drive other than C: results in Microsoft Office Customization Installer dialog

First let me get this stuff out of the way: This happens with my own addin, as well as another third party VSTO add-in, so I don't think I'm doing anything incorrect .net 4.0. VSTO runtime 10.0.50701 Windows 8. Also tried Windows 7 I am using the…
JohnZaj
  • 3,080
  • 5
  • 37
  • 51
1
vote
1 answer

Extending aspnet_users to add additional field

I have an application that i am building in lightswitch and created the user roles and authentication for them. in my database, i have all aspnet security tables. Now in aspnet_Users where i have all my users and aspnet_memebership with relevant…
Maverick1415
  • 113
  • 1
  • 12
1
vote
2 answers

Programmatically check if user has enough rights for software installation

In my application (it supports only Windows 7 and higher), I want to run a script, which will run some installation program. Before doing it, I need to check if running this script from my app will provide it with enough rights that it could run…
vklu4itesvet
  • 375
  • 1
  • 4
  • 15
1
vote
2 answers

CASPOL, FullTrust and running an ActiveX Control in IE with FullTrust based on URL

I've set up an activex control to run on a webpage. The server is able to serve this webpage to itself, but other machines on the intranet and internet aren't able to access it. The Caspol settings look like this: Code Groups: 1. All code:…
Daniel
  • 10,864
  • 22
  • 84
  • 115
0
votes
1 answer

Getting windows user name without using Windows auth?

Is it possible to get the currently logged in Windows user name in ASP.NET MVC3 without using Windows Auth? I just need the login name, nothing else. I'm building a quick and dirty dashboard app that will be used by my team. Some of the team's…
0
votes
1 answer

Showing images from DB in aspx file issue regarding security

we have link and when some one click on link then a image will be shown. the link is like image.aspx will fetch image from db based on ID. whenever we click on link then a error is showing regarding security at staging server. locally everything…
Thomas
  • 33,544
  • 126
  • 357
  • 626
0
votes
2 answers

Sending