Hey Guys,
I'm Pentesting a website developed with asp.net and it's giving me a warm time....So far i know :
-> Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.7.2106.0
-> Source File: c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\3320d421\2e92cc1c\App_Web_default5.aspx.cdcab7d2.u23n-llr.0.cs Line: 0
-> They have a MX record... i.e. mail.website.com
-> redirecting http to https
-> They use IIS 7 or IIS 8
-> website created with bootstrap
-> RequestValidation is turned on
-> They have GET,POST,OPTIONS, TRACING allowed
I am rather stuck as to how to further approach this Pentest.
[more info]
The website is one of those cashless systems where they supply employers some cards that they give their employees their pay via those cards, so the website has a login page that uses the card number and password has credentials.
Any help is appreciated...
I'm Pentesting a website developed with asp.net and it's giving me a warm time....So far i know :
-> Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.7.2106.0
-> Source File: c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\3320d421\2e92cc1c\App_Web_default5.aspx.cdcab7d2.u23n-llr.0.cs Line: 0
-> They have a MX record... i.e. mail.website.com
-> redirecting http to https
-> They use IIS 7 or IIS 8
-> website created with bootstrap
-> RequestValidation is turned on
-> They have GET,POST,OPTIONS, TRACING allowed
I am rather stuck as to how to further approach this Pentest.
[more info]
The website is one of those cashless systems where they supply employers some cards that they give their employees their pay via those cards, so the website has a login page that uses the card number and password has credentials.
Any help is appreciated...