ASP. NET resource Request vulnerability exploit tool Padbuster

ASP. NET resource Request vulnerability exploit tool Padbuster

In an ASP. NET site, developers often embed resources (pictures, JavaScript files) into DLL files for easy deployment of Web site projects. In the Web page, resources are requested using the Webresource.axd?d=xxx form. where XXX uses cbc-r encryption to generate an access key. Due to the existence of padding Oracle Vulnerability in the CBC-R algorithm, infiltration personnel can be illegally accessing Web site sensitive files, such as Web. config. Padbuster is a specificity tool provided by Kali Linux. The tool is written in the Perl language and can be used to brute-force access keys to obtain the contents of a specified file.

ASP. NET resource Request vulnerability exploit tool Padbuster