Click here to Skip to main content
Search within:


Web Development » Web Security
Submit your article

Web Security

Great Reads

Claim based Authentication- WIF: Part 3
by Brij
This article discusses some problems with the earlier approach and discusses Identity federation
Developing a Secure Website - A Simple Reference on What to Look Out For
by Dennis Baberich
A simple check list on what to look out for when developing a website
A way to improve performance of your Web Application significantly
by Brij
A way to improve performance of your Web Application significantly
Web.Config is Cached
by Steve Wellens
There was a question from a student over on the Asp.Net forums about improving site performance. The concern was that every time an app setting was read from the Web.Config file, the disk would be accessed. With many app settings and many users, it was believed performance would suffer. Their intent

Latest Articles

Form Based Parameter Tampering Attack in MVC Application and Prevention Mechanisms
by Shemeemsha RA
Prevent MVC Application from Cross Site Request Forgery Attacks
by Shemeemsha RA
First step towards securing MVC applications
Web Performance Trends: One Load, That's All
by Saleh Hamadeh
Web performance trends - one load, that's all
Web Security: Unvalidated Redirects
by Saleh Hamadeh
Web security: unvalidated redirects

Research Library

How to Secure Your Software for the Mobile Apps Market
Due to recent innovations in the mobile device industry, demand for...
Tips for Protecting PoS Environments Against Multi-Stage Attacks
In 2012, credit card and debit card fraud resulted in losses amounting...
Developer's Guide to Protecting your Applications and Reputation
For years, developers have known that one of the best ways to reassure...
Protecting Android™ Applications with Secure Code Signing Certificates
Android is on the rise. Unfortunately, popularity can also bring...

Discussions

Re: Thoughts
by Chad3F on article "SecurePHPWebAppCoding - SQL Injection...
Re: Brilliant Article
by Azeet Chebrolu on article "Thinktecture Identity Server -...
Re: Brilliant Article
by prima shah on article "Thinktecture Identity Server -...
Re: Nice and Simple Article
by Shemeemsha RA on tip/trick "Form Based Parameter Tampering...
Nice and Simple Article
by Mohammed Sadullah on tip/trick "Form Based Parameter Tampering...

All Articles

top
Sort by Score
Title
Updated
Author
Score

ASP.NET - Security 

Claim based Authentication- WIF: Part 3
26 Nov 2011
Brij
This article discusses some problems with the earlier approach and discusses Identity federation
C#.NETArchitectDevWebFormsBeginnerIntermediateAzure
Embedded Application Identity Part 1: Basic Identity Management in ASP.NET MVC 5
8 May 2014
Peter Carrasco
Identity Management using the ASP.NET Identity database embedded in your ASP.NET MVC application
ASP.NETWindowsBeginner
Forms Authentication and Role based Authorization: A Quicker, Simpler, and Correct Approach
3 Dec 2009
Al-Farooque Shubho
This article describes a correct and smarter way of implementing Role based authorization with Forms authentication in ASP.NET.
C#ASP.NETWindows.NETArchitectDevIntermediate
Switching Between HTTP and HTTPS Like A Bigshot Hotshot
22 Feb 2010
Pero Matić
How to automatically enforce and switch between secure (HTTPS/SSL) and non-secure (HTTP/non-SSL) web pages without hard-coding absolute URLs, using SEO friendly redirects.
.NET2.0Win2KWinXPWin2003VistaIIS6VS2005.NET3.0C#3.0IIS7
Claim based Authentication and WIF: Part 2
8 Nov 2011
Brij
This part mainly discusses WIF and demonstrates a sample step by step
C#ASP.NET.NETArchitectDevWebFormsBeginnerIntermediate
Claim Based Authentication and WIF: Part 1
13 Oct 2011
Brij
This article discusses the basics of Claim based Authentication. This is the first part of the Series.
C#Windows.NETArchitectDevWebFormsBeginnerIntermediateCloud
Implement secure ASP.NET MVC applications
21 Jul 2014
Jovan Popovic
This article discusses various aspects of ASP.NET MVC security and shows some tips to implement these elements in your applications.
C#ASP.NETJavascriptXMLHTMLDevIntermediateMVC
SecurePHPWebAppCoding - SQL Injection - What is it and How to Stop It?
14 Sep 2014N
Abani Kumar Meher
This article describes how we write code while developing web application which results in SQL injection vulnerability and how we should write code to prevent it.
SQLDevQAPHPIntermediateMySQLsecurityMySQLwebapp
Target Eye Revealed part 2 - Target Eye's Screen Capturing
12 Jun 2014
Michael N. Haephrati
How Target Eye's screen capturing mechanism works
C++WindowsMFCGDImonitoringhaephratiHaephrati
CAPTCHA Image in PHP
23 Feb 2009
Mohammad Dayyan
This article demonstrates how we can create a CAPTCHA image with PHP
WindowsIISDevLinuxPHPAdvancedApache
Role-based Security with Forms Authentication
26 Jul 2009
Heath Stewart
Provides insight and tips on using role-based (groups) Forms Authentication in ASP.NET, which has only partial support for roles.
.NET1.0.NET1.1C#ASP.NETWindowsVisual-StudioDevIntermediate
Switching Between HTTP and HTTPS Automatically: Version 2
7 Feb 2011
Matt Sollars
An article on automatically switching between HTTP and HTTPS protocols without hard-coding absolute URLs
.NET1.1.NET2.0Win2KWinXPWin2003VS.NET2003VS2005C#VBASP.NET
Captcha Plug-in in CodeIgniter
29 Jul 2008
Jahedur Rahman Chowdhury
How to use thr captcha plugin in CodeIgniter.
DevPHPIntermediate
Webserver Security Check
4 Oct 2010
Elmue
This article contains a security check script and describes how to secure Windows and Linux webservers against hackers.
ASPPHPBeginnerVirtualization
HttpSecureCookie, A Way to Encrypt Cookies with ASP.NET 2.0
3 Apr 2006
Adam Tibi
Discussing how to encode and tamper-proof text and cookies using the MachineKey, by using reflection.
.NET2.0VS2005C#ASP.NETWindowsDevIntermediate
ASP.NET web application security review: Do's & Don'ts
5 Aug 2014
santosh poojari
This article helps you to build and enable robust web applications with respect to various aspects of security that needs to be taken care of while designing a system.
C#2.0C#3.0.NET3.5ASP.NETXMLIISArchitectDevIntermediateAdvanced
Securing ASP.NET Applications
9 Apr 2009
Gil Shabat
This article takes a look at two recent attacks on web applications and how they were perpetrated. Then it dives head first into a litany of different potential security holes and more importantly, how to plug them in ASP.Net.
ASP.NETDevIntermediate
Protect Files and Folders Using HttpHandlers in ASP.NET
9 May 2011
Stuart Blackler
A quick walkthrough showing how to protect files and folders using HttpHandlers, in VB.NET and C#.
C#VBASP.NETXML.NETDevWebFormsIntermediate
Thinktecture Identity Server - Configuration, Customization
19 Nov 2013
Azeet Chebrolu
Installing, extending Identity Server and implementing session token caching
C#3.0WindowsArchitectDevIntermediateAdvancedC#4.0MVCsecurityweb-security
How to : Using PHP Fusion 7 CAPTCHA
12 Feb 2009
Mohammad Dayyan
Shows you how using PHP Fusion 7 CAPTCHA class
LinuxPHPIntermediateApacheMySQL
Encrypt and Decrypt Data with C#
17 May 2006
Syed Moshiur Murshed
Encrypt and Decrypt important data with C# and play
C#Windows.NETVisual-StudioDevIntermediate
Top 10 Application Security Vulnerabilities in Web.config Files - Part Two
22 May 2007
Bryan_Sullivan
In this second part of a two-part series, you will learn about application security issues related to authentication and authorization, as well as five vulnerabilities commonly found in ASP.NET web-based applications.
ASP.NETXMLWindows.NETVisual-StudioDevWebFormsIntermediateSysAdmin
Encrypting Cookies to prevent tampering
23 Dec 2004
Eric Newton
In this article, we talk about the lack of Cookie security built-into the ASP.NET framework, and a decent workaround to provide integrated tamper proof security for cookie data.
.NET1.0.NET1.1C#ASP.NETWindowsVisual-StudioDevIntermediate
Restricting Access to trace.axd using IIS Basic Authentication
15 Sep 2004
ChrisAdams
A technique to use the IIS Basic Authentication mechanism to control access to trace.axd.
IIS5.1IIS6ASP.NETWindows.NETVisual-StudioDevIntermediate
Custom Authentication provider by implementing IHttpModule, IPrincipal and IIdentity
2 Nov 2003
I Piscean
An article on writing Custom Authentication provider in ASP.NET
.NET1.0C#ASP.NETWindowsDevIntermediate
Getting Started Spring Security
13 Sep 2011
Diptee Warudkar Dalal
This article explains the core concepts of Spring Security Namespace Configuration and explains the set up required for a simple form based authentication in a web application.
JavaWindowsIntermediate
Protect non-.NET Assets Using a .NET Reverse Proxy with Forms Authentication and ISAPI
27 Aug 2006
Toby Emden
How to protect secure assets using a .NET Reverse Proxy, an ISAPI redirection filter and .NET Forms Authentication
VC6.NET2.0Win2KWinXPWin2003VistaIIS5.1IIS6VS2005VB
Authenticate User by Roles in ASP.NET
25 Aug 2010
Lewis Liu L
A simple forms authentication strategy in ASP.NET with example web site
WinXPC#ASP.NETWindowsIntermediate
Virtual keyboard - Secure keying of password
12 Dec 2011
DestinyCoder007
Virtual keyboard - can be used for secure keying of passwords.
C#ASP.NETJavascriptDevIntermediate
Password Security
21 Oct 2013
dev_hsayed
Password security
Windows
Single sign-on across multiple applications in ASP.NET
31 Mar 2004
Michal Altair Valášek
By default, Forms authentication does not support single sing-on accross multiple applications. But is not too complicated to tweak it the appropriate way.
.NET1.0.NET1.1VBASP.NETWindowsVisual-StudioDevIntermediate
ASP.NET MVC - AuthorizeWithExemptionsAttribute
26 Aug 2010
Maxim Novak
This base controller will secure all your actions except those which will be marked as UnsecuredAction.
C#ASP.NETWindows.NETDevIntermediate
Cross Domain/Platform Authentication and Data Transfer
29 Dec 2008
Tomz_KV
Introduces a methodology for authenticating user in cross domain/platform and transferring user data from one site to another during the authentication process.
.NET2.0SQL-server-2005C#2.0C#ASP.NETSQL.NETSQL-ServerDevWebForms
Secure File Download Using Basic Authentication
19 Mar 2006
Mohammed Faraz (Captain)
Secure file download using Basic Authentication. The interesting part is that we maintain two separate entry points for uploading and downloading a file.
Win2KWinXPWin2003IE6.0C#ASP.NET.NETIISVisual-StudioHTML
Server-side fix for the Universal PDF XSS Vulnerability
24 Apr 2007
Sidney Chong
This article describes a server-side fix for the recently discovered vulnerability in the PDF reader plugin by Adobe.
.NET2.0Win2KWinXPWin2003VistaVS.NET2003VS2005C#2.0ASP.NETIIS
How To : Using Phpbb3 CAPTCHA
12 Feb 2009
Mohammad Dayyan
Using PHPBB3 CAPTCHA
DevLinuxPHPIntermediateApache
TripleDES Encrypted Configuration File
29 Feb 2004
Matthew Hazlett
How to make your server settings safer
Win2KWinXPWin2003ASP.NET.NETVisual-StudioDevIntermediate
SQL injection attacks
18 Jul 2005
Amit Kukreti (Vervelogic)
An article on SQL injection attacks.
SQL2000C#ASP.NETSQLWindows.NETVisual-StudioDBADevIntermediate
SSL Peer Verification
21 Apr 2011
All Time Programming
Verifying the Server Certificate on the client side using a CA file
C#WindowsDevIntermediatesecuritycryptographyWebService
Web Service and IIS Security hurdles
27 Jan 2006
Cohen Shwartz Oren
How to configure IIS in order to enable the use of Named Kernel Objects in Web Services.
WinXPWin2003IIS6C#ASP.NET.NETVisual-StudioDevIntermediate
Securing image URLs in a website
21 Apr 2004
yvdh
How to hide image URLs on a website to avoid illegal access, using a custom HttpHandler and encryption.
ASP.NETWindows.NETVisual-StudioDevIntermediate
A Windows logon, web user control implementation - in ASP.NET
24 Nov 2003
Harish Palaniappan
A classic example of implementing reusable web user control, with supporting controls and classes to keep the code manageable.
.NET1.0.NET1.1Win2KWinXPWin2003ASP.NETVisual-StudioDevIntermediate
Encrypt Password Field in SQL Server, Registry Information & Query String
13 Jan 2003
Syed Adnan Ahmed
How to encrypt the database password field, registry information and query string.
.NET1.0Win2KWinXPVBASP.NETVisual-StudioDevIntermediate
Cookieless ASP.NET forms authentication
25 Aug 2002
brutal
They say it is not possible to use cookieless forms authentication in .NET. Well it is, and relatively easy to accomplish!
.NET1.0C#ASP.NETWindowsVisual-StudioDevIntermediate
Form authentication and authorization in ASP.NET
21 Apr 2006
Ahmed jamil Kattan
This article will explain how to secure websites using the ASP.NET Forms Authentication.
Win2KWinXPC#ASP.NETXML.NETVisual-StudioDevIntermediate
Top 10 Application Security Vulnerabilities in Web.config Files - Part One
3 May 2007
Bryan_Sullivan
In part one of this two part article, you will learn about five of the top ten “worst offenders” of misconfigurations of application security that can cause overall problems for ASP.NET Web-based applications. Learn more about how to secure the Web.config files of an ASP.NET application.
ASP.NETXMLWindows.NETVisual-StudioDevQAWebFormsIntermediateSysAdmin
Custom membership provider for the ADO.NET Entity Framework
3 Jan 2013
Michael Ulmann
Custom membership provider implementation for the ADO.NET Entity Framework.
C#ASPASP.NETJavascriptXMLCSSHTMLDevXHTMLWebForms
Simple web based obfuscation
30 Jan 2007
Sacha Barber
Protect sensitive data from nasty web bots using server / client obfuscation methods.
C#2.0ASP.NETWindows.NETVisual-StudioDevIntermediate
Securing Images under Forms-Based Authentication in ASP.NET Applications
21 Oct 2002
James Coleman
Allows Forms-based authentication to work on non-parsed files such as images.
.NET1.0VBASP.NETWindowsVisual-StudioDevIntermediate
Client Side Hashing using JQuery
2 Jun 2009
sagnik mukherjee
Client side text hashing using JQuery
C#2.0C#3.0C#ASP.NETWindowsBeginnerIntermediate
Make ClickOnce Work With ASP.NET Forms Authentication
20 Mar 2008
David P Henry, Graham Murray
A solution for securing access to a ClickOnce application using ASP.NET Forms authentication.
.NET2.0IIS6.NET3.0VB8.0VB9.0IIS7.NET3.5VBASP.NET.NET
Simple HTTP Reverse Proxy with ASP.NET and IIS
22 May 2004
Vincent Brossier
Learn how easy it is to create HTTP Reverse Proxy in .NET using IIS.
.NET1.1Win2KWinXPWin2003C#ASP.NETVisual-StudioDevAdvanced
Using SSL with System.Web.Management.MailWebEventProvider
25 Oct 2007
Svante Seleborg
The Decorator pattern meets Reflection in a workaround to enable SSL for ASP.NET health monitoring e-mail event providers.
.NET2.0VS2005C#2.0.NET3.0ASP.NETWindowsDevWebFormsIntermediate
Secure Persistent ASP.NET Forms Authentication
27 Aug 2008
BrantBurnett
An ASP.NET system for having two authentication cookies, one secure and one insecure, to have multiple tiers of security by folder.
.NET2.0VS2005.NET3.0VB8.0VB9.0.NET3.5VS2008VBASP.NET.NET
Authorization Security Model in Web Applications Using .NET Attributes
26 Jul 2008
Samer Abu Rabie
This article talks about the authorization security model in Web applications using .NET attributes.
.NET2.0C#2.0.NET3.0C#3.0C#ASP.NET.NETArchitectDevIntermediate
Security Tips for Temporary File Usage in Applications
12 Oct 2006
Richard Lewis
Educate yourself on security best practices for temporary file usage in software applications.
ASP.NETWindows.NETVisual-StudioArchitectDevIntermediate
.NET Role-Based Security in a Production Environment
19 May 2008
Ralph in Boise
Edit web.config to Update the Data Provider for Shared Hosting with Role-Based Security: SQL Server, ODBC, Active Directory, ADAM, SQLite, MySQL, Access, XML
.NET2.0.NET3.0.NET3.5ASP.NET.NETArchitectDevWebFormsBeginnerIntermediate
Query string encryption for ASP.NET
7 May 2008
Michael Ulmann
Clear text query strings are a potential security threat for your web application. Thus, query strings should always be encrypted.
C#ASPASP.NETJavascriptCSSHTMLDevWebFormsAjaxIntermediate
Extending Forms Authentication - Windows or Custom Authentication
28 May 2004
McGiv
Combines Forms Authentication with Windows or Custom Authenticator.
.NET1.1C#ASP.NETWindowsVisual-StudioDevAdvanced
Using HTTP Modules To Combat Leeching
3 Dec 2003
KingLeon
An article to demonstrate how HTTP Module-based filtering can prevent leeching.
Win2KWinXPWin2003VBASP.NET.NETVisual-StudioDevIntermediate
Pass-Through Security Authentication (Single Sign-on) using ASP.NET
9 Sep 2004
Jayakanthan
The Pass-Through authentication enables a user to sign-on to their intranet and access other web applications without being asked for login again.
VC7VC7.1VC8.0.NET1.0.NET1.1Win2KWinXPWin2003VS.NET2003C#
Additional functionality for ASP.NET 2.0's CookieParameter
6 Nov 2004
Eric Newton
This article addresses some missing functionality in ASP.NET 2.0's CookieParameter type, including getting a multi-valued cookie Key value and providing some HttpCookieEncryption support.
.NET2.0C#ASP.NETWindowsVisual-StudioDevIntermediate
Authentication at the IIS Level
6 Sep 2011
s.jdm
This post talks about the authentication procedure that can be done in IIS.
WindowsIISDevIntermediate
Digest Calculator
24 Oct 2008
sri.krish
This article explains a simple way of implementing digest protocol in C#. A sample application is provided which shows step by step digest calculation.
.NET3.0.NET3.5C#ArchitectDevIntermediate
Prevent attacks on your website
6 Jul 2005
Prakash Kalakoti
Using a simple example, I'll explain how to prevent a program that can register thousands of dummy users to your database and play with your database and application performance.
.NET1.1VS.NET2003C#ASP.NETSQLWindowsDBADevQACOM
Securely Run the ASP.NET Worker Process as the System Account
27 Jan 2004
David Coe
Describes the proper way to configure a server to securely run the ASP.NET worker process runs as the system account.
VC7VC7.1VC8.0.NET1.0.NET1.1ASP.NETWindowsVisual-StudioMFCATL
Preventing Automated / Dictionary Login Attacks without the use of CAPTCHA
9 Jan 2005
JohnnyUSA
A simple way to prevent automated / dictionary login attacks without the use of CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart) images.
C#ASP.NETWindows.NETVisual-StudioDevWebFormsIntermediate
Roles-Based Authentication
22 May 2003
Zek3vil
Implement a Roles-Based Authentication using ASP.NET Forms Authentication
.NET1.0Win2KWinXPC#ASP.NETDevBeginner
Extending ASP.NET 2.0 security
23 May 2006
Joel Thoms
The current implementation of ASP.NET 2.0's security is great and I have fallen in love with it, but it's still too limited. I will show you how to extend ASP.NET 2.0's security using a custom HTTP Handler and your existing Web.sitemap.
.NET2.0VS2005C#ASP.NETXMLWindowsDevWebFormsIntermediate
Application Extension Mapping in a Shared Server Hosting Enviornment
11 Jul 2005
FredParcells
Protect any file type in a certain folder with login.
.NET1.1VS.NET2003C#ASP.NETXMLWindowsIISDevIntermediate
Rule Based Security using Microsoft Enterprise Library and CAS
7 Nov 2008
Ahmed Shokr
In this article I’ll explain a solution to secure web applications using custom membership and role providers with the Enterprise Library Security Application Block and code access security.
C#ASP.NETDevIntermediate
Removing SQL Injection on PHP and MySQL Based Architecture
19 Oct 2009
CalvinHartwell
A short guide on how to remove SQL Injection, with reusable code
SQLWindowsDevLinuxPHPDesignBeginnerIntermediate
Encrypt sensitive information in web.config file
14 Apr 2007
pgindia
Encrypt sensitive information in web.config file
ASP.NETXMLWindows.NETVisual-StudioDevWebFormsIntermediate
How to make your app secure
27 Jan 2005
Salil Khedkar
If you are into development or quality assurance of enterprise solutions, you must be aware of the security aspect of your application. This article provides a checklist for the same...
SQL2000C#ASP.NETSQLWindows.NETVisual-StudioArchitectDBADev
Enhanced and Secure Connection Strings in Web.Config
25 Jan 2003
Vasudevan Deepak Kumar
Here we would discuss some simple steps, which would facilitate keeping our database connection strings safe and encrypted in Web.Config.
.NET1.0Win2KWinXPC#VBASP.NETVisual-StudioDevIntermediate
ASP.NET Forms Authentication for Specific Objects
4 Oct 2007
Antebios
How to customize forms authentication to protect specific directories or pages.
.NET2.0VS2005C#2.0ASP.NETWindowsDevWebFormsIntermediate
BaseWeb ISAPI Security Module
22 Mar 2005
Christopher G. Lasater
This article details a way to perform web security much like ASP 2.0 does it, using an ISAPI Filter.
IIS6VS.NET2003C#ASP.NETWindows.NETDevIntermediate
Simple Captcha with ASP.NET
5 Aug 2005
Oguz Altuncu
Simple text to image generator to block spammers inserting data to your database, with ASP.NET.
C#ASP.NETWindows.NETVisual-StudioDevIntermediate
Addressing Vulnerabilities in JavaScript in ASP.NET Web Sites
8 Sep 2009
Scott Norberg
This describes some of the potential security concerns caused by common programming techniques and how to get around them.
ASP.NETJavascriptArchitectDevIntermediate
Rationalizing access checks with HMAC:ed URLs
16 Oct 2004
Hugo Hallman
An article on rationalizing away some access cheks for protected ASP.NET resources, while maintaining client side cacheability.
VC7VC7.1VC8.0.NET1.0.NET1.1.NET2.0C#ASP.NETWindowsVisual-Studio
Preventing SQL Injection Attacks
14 Jul 2008
Marius Mihailescu
Security is a very important topic and a very complicated one in ASP.NET.
VBASP.NETSQLDevWebFormsBeginner
Sending Authenticated e-mail in ASP.NET 2.0
5 Feb 2006
Catalin Radoi
How to send authenticated e-mail from ASP.NET (login/password)
ASP.NETWindows.NETVisual-StudioDevWebFormsBeginner
On-Premise Application Identity: Windows Authentication in ASP.NET MVC
12 May 2014
Peter Carrasco
Move your local MVC application to the big league with Active Directory, DNS, and IIS on Windows Server 2012
Intermediate
top
Sort by Score
Title
Updated
Author
Score

General 

IIS security settings and different permission using installer class with custom action
14 Aug 2012
Ravi_Vaswani
Setting IIS security type and user, accounts permissions using installer class and custom action
.NET3.5C#ASP.NETDevIntermediateAdvanced.NET4
Two Factor Authentication with JavaScript and HTML5
4 Jan 2013
Vyacheslav Voronenko
Compact One Time Password Generator (RFC6238) written in javascript
JavascriptPHPOfflineAuthentication
Implementing Two Factor Authentication in ASP.NET MVC with Google Authenticator
21 Aug 2013
Rick Bassham
How to add extra security to your MVC web application, using two factor authentication.
C#ASP.NETMVCMembership
OpenID With Forms Authentication
13 Dec 2010
Sacha Barber
Shows how to use OpenID with ASP.NET MVC Forms Authentication.
ASP.NETJavascriptXMLDevIntermediateC#4.0.NET4
Stuxnet Malware Analysis Paper
9 Sep 2011
AmrThabet
This article will focus on Stuxnet’s windows infection methods and spreading methods. The tricks were used by stuxnet and the evidences behind the criminals of stuxnet.
WindowsAdvanced
SQL Injection and Cross-Site Scripting
29 Dec 2010
Bryian Tan
An article on SQL Injection and Cross-Site Scripting with sample code in C#.
C#ASP.NETJavascriptSQL.NETDevBeginner
The Art of Win32 Shellcoding
6 Feb 2012
AmrThabet
How to write a reliable shellcode on win32, how to bypass the obstacles that you will face in writing a win32 shellcode and how to implement your shellcode into Metasploit
CWindowsWin32ASM
Building a SaaS Authentication System Using the ASP.NET Membership Provider
12 Mar 2013
Joel Cogley
How to build a SaaS application using the ASP.NET SqlMembership Provider.
C#ASP.NETDevIntermediate
A Beginner's Tutorial for Understanding and Implementing Password Hashing and Salting
19 Jun 2013
Rahul Rajat Singh
In this article we will discuss about securing the user passwords by using hashing and salting on the user passwords.
C#ASP.NET.NETBeginnerMVCsecurity
SQL Injection Knowhow
6 Jun 2011
Arpit Dubey
This article explains SQL injection attacks, mitigation strategies, and factors to consider while testing.
SQLDBADevQAIntermediatesecuritytesting
HTML and JavaScript Injection
6 Dec 2010
Skynet_Code
HTML and JavaScript code injection techniques.
JavascriptHTMLDevBeginnerSysAdminweb-security
Hack Proof Your ASP.NET Application From Cross Site Scripting (XSS)
8 Jul 2013
Sarvesh Kushwaha
This article describes what XSS is and how to prevent XSS attacks.
C#ASP.NET.NETArchitectDBADevQAIntermediate
Manage security and redirection for non authorized access in MVC
18 Jul 2012
Yves Vaillancourt
How to apply security and redirection to a view when a user cannot access a controller or a controller action in MVC
ASP.NET.NETDevIntermediateC#4.0MVCWeb-Developmentsecurity
Understanding ASP.NET Roles and Membership - A Beginner's Tutorial
7 Mar 2012
Rahul Rajat Singh
How ASP.NET lets us create sites with an authentication and authorization mechanism in place and how we can use ASP.NET server controls to quickly and efficiently implement this.
C#ASP.NETDevBeginner
Secure Spike Engine Websockets with TLS/SSL
10 Jun 2014
Kel_
Securing Spike Engine HTTP & Websockets with TLS/SSL layer.
C#WindowsHTMLArchitectDevSysAdminC#3.5securityC#5ssl
ASP.NET Ver 1.1 Web Application and Windows Authentication – A Case Study
19 Dec 2006
josekonoor
The purpose of this case study is to explain how to implement application security for ASP.NET web applications using ‘Integrated Windows Authentication’.
C#ASP.NETWindows.NETVisual-StudioArchitectDevAdvanced
Asking the Right Question: Penetration Testing vs. Vulnerability Analysis Tools, Which is Best?
6 Feb 2007
Dennis Hurst
Vulnerability analysis tools and penetration testing are important parts of securing your web applications. Learn more about how the web application security industry has evolved and how to ensure the security of your applications.
DevQAIntermediateAll-Topics
SRE with Antixss Module
2 Apr 2012
deepakaitr12345
SRE protects applications from Cross-Site Scripting (XSS) attacks by leveraging the Anti-XSS library to encode data.
C#ASP.NETXMLDevBeginner
Creating Twitter STS with ASP.NET MVC and WIF
7 May 2013
Dmitry Tretyakov
Step by Step tutorial describes how to create custom Security Token Service.
DevAzuresecuritytwitterMVC4.NET4.5


Advertise | Privacy | Mobile
Web01 | 2.8.140916.1 | Last Updated 20 Sep 2014
Copyright © CodeProject, 1999-2014
All Rights Reserved. Terms of Service
Layout: fixed | fluid