Download pdf - Advances in secure (ASP).NET development –Break … you run ASP NET 4.5 httpRuntime onfigureAn to xss e ET Sy Web _ S Sy Web , Ve Cul tu ith attribute sectlons are . What is the

http://www.microsoft.com/security/sdl/

mailto:[email protected]

http://msdn.microsoft.com/en-us/library/w0x726c2.aspx





http://upload.wikimedia.org/wikipedia/commons/thumb/d/d3/DotNet.svg/250px-DotNet.svg.png





http://en.wikipedia.org/wiki/Category:.NET_programming_languages

http://en.wikipedia.org/wiki/Category:.NET_programming_languages

http://msdn.microsoft.com/en-Us/library/ms178685.aspx




http://www.codeproject.com/Articles/19675/Cracking-the-Mysteries-of-NET-2-0-Configuration
















http://blog.csnc.ch/2012/04/exploit-credentials-stored-in-windows-group-policy-preferences/















http://media.hacking-lab.com/largefiles/7205/Paper_DisassembleDotNetClient_v2.0.pdf




http://blogs.msdn.com/b/webdev/archive/2012/10/22/cryptographic-improvements-in-asp-net-4-5-pt-1.aspx




















































http://msdn.microsoft.com/en-us/library/dtkwfdky(v=VS.100).aspx




http://msdn.microsoft.com/en-us/library/ms995349.aspx




http://www.microsoft.com/security/sdl/default.aspx

http://www.microsoft.com/security/sdl/default.aspx

http://www.microsoft.com/en-us/download/details.aspx?id=6544




http://msdn.microsoft.com/en-us/library/ms228167(v=vs.100).aspx



http://msdn.microsoft.com/en-us/library/zeshe0eb(v=vs.85).aspx



http://msdn.microsoft.com/en-us/library/1fk1t1t0.aspx



http://www.ieee-security.org/TC/SP2011/PAPERS/2011/paper030.pdf






http://msdn.microsoft.com/en-us/library/tkscy493(v=vs.85).aspx



http://msdn.microsoft.com/En-Us/library/wyts434y.aspx



http://blogs.msdn.com/b/webdev/archive/2012/11/19/all-about-httpruntime-targetframework.aspx







http://msdn.microsoft.com/en-us/library/ff648344.aspx



[…]

<system.web>

<deployment retail="true" />

<pages viewStateEncryptionMode="Always" />

<httpCookies httpOnlyCookies="true"

requireSSL="true" />

</system.web>

<authentication>

<forms requireSSL= true" />

</authentication>

[…]

<httpRuntime […]

encoderType="System.Web.Security.AntiXss.

AntiXssEncoder,System.Web, Version=4.0.0.0,

Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

<system.web>

<trust level="Medium" originUrl="" />

</system.web>