Questions tagged [.net-security]

Not a stand alone tag. Use with any relevant language, project type and specific security tags. For questions relating to the programming aspects of .NET framework and security. For security questions that are not specific to coding, consider looking at https://security.stackexchange.com/.

Not a stand alone tag. Use with any relevant language, project type and specific security tags. For questions relating to the programming aspects of framework and security. For security questions that are not specific to coding, consider looking at Information Security Stack Exchange.

For more information about see the docs at Security in the .NET Framework

48 questions
0
votes
1 answer

Converting Openssl signing to .NET6

Application invokes openssl for signing using openssl rsautl -sign -in rasi.bin -inkey riktest.key -out allkiri.bin How to convert this to .NET 6 so that invoking openssl is not required? riktest.key is text file containing -----BEGIN RSA PRIVATE…
Andrus
  • 26,339
  • 60
  • 204
  • 378
0
votes
1 answer

Best security option in WPF and web service

I have WPF application deployed on n number of system. The WPF application consumes my web service and performs transaction in a regular interval by calling web method. What kind of security should be implemented in this case in order to avoid…
user882249
  • 11
  • 1
0
votes
1 answer

How to manipulate the ClaimsIdentity of current token using middleware in .net core app?

I have a middleware to use in development mode like following. public class DevelopmentUserMiddleware { private readonly RequestDelegate _next; public DevelopmentUserMiddleware(RequestDelegate next) { _next = next; } …
barteloma
  • 6,403
  • 14
  • 79
  • 173
0
votes
1 answer

Can I read/update only a part of an entity using entity core?

I have the User entity that contains the Email/Name/.../HashedPassword/Salt. Now, every time, after the user logs in the entire User entity goes to the client so that the user can modify some of the properties. However I would prefer not to send the…
0
votes
2 answers

What's the best way to leave a backdoor in ASP.NET Identity app?

I'm a developer of a company's internal client system and there are some situations I have to login into the system using a user account to check for a bug or something. Since passwords are encrypted I can't just look up them in the DB and get the…
kseen
  • 359
  • 8
  • 56
  • 104
0
votes
1 answer

C# Web API - Authenticating users by client certificate

I have to authenticate a consumer of our REST API by authenticating their client certificate and I'm a little confused as to how to authenticate the client. Is it enough to store the CA cert in my local store, send the client the certificate (edit:…
Eitan
  • 1,434
  • 6
  • 21
  • 53
0
votes
1 answer

Bettercap: bind: address already in use

Whatever port I try to use I keep getting the error: listen tcp 0.0.0.0:PORT_NUMBER: bind: address already in use Environment I also installed this using Brew if you need to know that Bettercap 2.11.1 Mac OS High-Sierra golang 1.11.4 Command…
modusTollens
  • 397
  • 7
  • 23
0
votes
0 answers

Potentially dangerous request is loading the page

I hosted an application in ASP.NET 4.0 webforms. When I am browsing hostname/DressDetail.aspx?&category=1&code=76 It is showing an error message like: A potentially dangerous Request.QueryString value was detected from the…
Hrishikesh T T
  • 339
  • 2
  • 11
0
votes
1 answer

Encryption and Decryption with the help of Certificate public Private key

I want to create certificate with public and private key. Then I want to extract public key from it and with the help of public key I want to encrypt data. On the receiver side I want to decrypt data. How can i create required certificate? Sample…
0
votes
2 answers

Could someone explain this facebook script? XSS?