I've been running the SANS DEV544 Course Twitter account @SANSecDotNet for about a week now and was asked a simple questions by @competentgirl about the differences between WebScarab and Microsoft Fiddler Web Debugger . I've used both on occassion, but never considered them similar - mainly because I...
Posted to
Underground Coding
on Fri, May 22 2009
Filed under: httpmodule, asp.net, vulnerability, fiddler, viewstate, scanner
This week I finally have had some time to take a look underneath the Membership and Roles infrastructure in ASP.NET 2.0 and have a significant update to the ASP.NET SmartCard HttpModule coming in the next couple weeks, as well as some necessary additions. A preview of this update: SmartCard support under...
Posted to
Underground Coding
on Thu, Feb 14 2008
Filed under: security, smartcard, .net, httpmodule, membership, asp.net
Recently I ran across a pretty odd issue on an ASP.NET web site that I was able to work through. Setup 1. Internet Explorer 2. Smart Card Authentication with SSL/TLS 3. ASP.NET 2.0 web site running on IIS 6.0 on Win2k3 Symptoms When using the web site, users complained that at certain points when...
Posted to
Underground Coding
on Thu, Jan 24 2008
Filed under: debugging, smartcard, programming, asp.net, tls, clientcertificates, CAC, ssl, iis
I've posted a PDF version of Implementing Smart Card Authentication and Authorization using ASP.NET. You can download it here .
Posted to
Underground Coding
on Wed, Apr 25 2007
Filed under: security, authentication, authorization, smartcard, .net, asp.net, pdf