11 April 2019

18 links · Thursday

Troy Hunt on Changing Password Behaviors

Have I Been Pwned's Troy Hunt discusses how to handle breached authentication data and credentials, credential stuffing, and biometrics.

ASP.NET Core In Process Hosting on IIS with ASP.NET Core

In version 2.2 ASP.NET Core adds support for direct in-process hosting which improves throughput considerably using an easy mechanism that allows switching between in-process and out-of-process hosting. In this post I describe how to use in process hosting and…

nccgroup/dotnetpefuzzing

Tiny .NET PE Fuzzing Harness - Proof of Concept. Contribute to nccgroup/dotnetpefuzzing development by creating an account on GitHub.

Non Obvious PE Parsers – the .NET runtime – Part 1

The Windows program loader isn’t the only PE parser in Windows. The .NET runtime has its own used for loading modules as well. We can find yester years code for on the Internet for the implementation which shows some interesting defensive properties. Examples …

klbouman - Overview

klbouman has one repository available. Follow their code on GitHub.