Detect ASP.NET Webforms, WCF, SharePoint, and Telerik vulnerability primitives.
npx skills add https://github.com/uphiago/recon-skills --skill hunt-aspnet-uphiago
Please help me install this Agent Skill. Skill: hunt-aspnet Source: https://github.com/uphiago/recon-skills/tree/main/redteam/hunt-aspnet Command: npx skills add https://github.com/uphiago/recon-skills --skill hunt-aspnet-uphiago
This Skill eliminates the gap in standard reconnaissance for legacy ASP.NET applications (including Webforms, WCF, SharePoint farms, and Telerik-integrated sites) by identifying high-severity vulnerability primitives such as ViewState deserialization flaws, exposed diagnostic endpoints, and framework-specific bypasses that are frequently missed by automated scanning tools.
Use the hunt-aspnet skill to scan the target ASP.NET application at https://target.example for exploitable ViewState misconfigurations, exposed diagnostic endpoints, and Telerik component vulnerabilities, then prioritize findings for your pentest report.
High-intent search queries and answers about installing and using this skill.
To find exploitable ASP.NET ViewState vulnerabilities, fingerprint the application version and IIS configuration, then probe for signed-only ViewState and dual-parser MAC bypass anti-patterns that can lead to remote code execution.
Detecting exposed diagnostic endpoints in legacy ASP.NET applications involves enumerating anonymously accessible trace.axd and elmah.axd paths to identify sensitive stack traces or credential disclosures missed by automated scanners.
Yes, you can hunt for Telerik and SharePoint deserialization flaws by probing for unpatched components and unauthenticated WCF admin endpoints to identify high-severity vulnerability primitives in enterprise .NET Framework targets.
ASP.NET version fingerprinting improves bug bounty reconnaissance by analyzing response headers, hidden form fields, and URL patterns to narrow the attack scope and identify legacy framework misconfigurations without manual guesswork.
You need to check for ViewState MAC bypass anti-patterns when assessing classic ASP.NET Webforms applications, validating whether request validators and MAC checks can be bypassed to achieve remote code execution.
Automated scanning tools are frequently insufficient for finding IIS and WCF misconfigurations, as they miss high-value vulnerability primitives like unauthenticated WCF admin endpoints and framework-specific access control bypasses.
pdparchitectDetect ASP.NET security vulnerabilities including ViewState deserialization and configuration disclosure.
EntroVyxIdentify and exploit WordPress CORS, XMLRPC, and registration chains.
sseshachalaIdentify ASP.NET deserialization and ViewState exposure risks by enumerating endpoints.
transilienceaiCoordinate CVE vulnerability testing across identified technology stacks and APIs.
