vuln-netframework

vuln-netframework is a .net-framework 4.7 project that include worst coding practices about common vulnerabilities like Insecure Deserialization, Os Command Injection, SQL Injection, etc.

setup

pre-request

• .net framework 4.7
• database for SQL Injection arttacks (optional)
  • change connection string via your db values
  • create a table that name USER
  • USER table must include two cloumns these names NAME and ROLE

security-topics

• Injection
  • OS Command Injection
  • SQL Injection
• Request Forgery Attacks
  • Server Side Request Forgery
• General Web Vulnerabilities
  • Insecure Deserialization (Friday the 13th JSON)
  • Regular Expression DOS

devsecops

• All vulnerabilities can be detected via semgrep-rules

contribution

• If you want to support, just send PR :)

Note: Please pay attantion project structure before creating PR