+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: ASP.NET Website Pentest help (/showthread.php?tid=5799686)
ASP.NET Website Pentest help - Mrinquisite3120 - Feb 14, 2018
Hey Guys,
I'm Pentesting a website developed with asp.net and it's giving me a warm time....So far i know :
-> Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.7.2106.0
-> Source File: c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\3320d421\2e92cc1c\App_Web_default5.aspx.cdcab7d2.u23n-llr.0.cs Line: 0
-> They have a MX record... i.e. mail.website.com
-> redirecting http to https
-> They use IIS 7 or IIS 8
-> website created with bootstrap
-> RequestValidation is turned on
-> They have GET,POST,OPTIONS, TRACING allowed
I am rather stuck as to how to further approach this Pentest.
[more info]
The website is one of those cashless systems where they supply employers some cards that they give their employees their pay via those cards, so the website has a login page that uses the card number and password has credentials.
Any help is appreciated...