Exploiting __VIEWSTATE knowing the secrets
Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking:
HackTricks Training GCP Red Team Expert (GRTE)
Check the amazing post from https://soroush.secproject.com/blog/2019/04/exploiting-deserialisation-in-asp-net-via-viewstate/
Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking:
HackTricks Training GCP Red Team Expert (GRTE)
PreviousBasic .Net deserialization (ObjectDataProvider gadget, ExpandedWrapper, and Json.Net)NextExploiting __VIEWSTATE without knowing the secrets
Last updated