skills.rest
grivera82
grivera82COMMUNITY
Explore all skills by this author →
GitHub

hunt-aspnet

Detects and analyzes ASP.NET surface vulnerabilities in WebForms, WCF, and SharePoint deployments.

Updated May 31, 2026
Search Tags:#sharepoint#deserialization#webforms#aspnet#viewstate#security-hunting
One-click install
npx skills add https://github.com/grivera82/pi-bughunter --skill hunt-aspnet-grivera82
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-aspnet
Source: https://github.com/grivera82/pi-bughunter/tree/main/skills/hunt-aspnet
Command: npx skills add https://github.com/grivera82/pi-bughunter --skill hunt-aspnet-grivera82

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies ASP.NET surface exposure including signed-only ViewState, machineKey misconfigurations, and legacy deserialization pathways to help security teams triage and remediate weaknesses.

Core Features & Use Cases

  • Fingerprint ASP.NET deployments (WebForms/WCF/IIS) to determine framework version and ViewState configuration.
  • Detect deserialization surfaces and misconfigurations such as signed-only ViewState and cross-node MAC failures to prioritize fixes.
  • Guided triage for enterprise apps (SharePoint, .NET WebForms, and related portals) to translate findings into remediation steps.

Quick Start

Run the hunt-aspnet skill against a target to surface signed-only ViewState, misconfigured machineKey, and related ASP.NET surface exposures for triage.

Frequently Asked Questions about hunt-aspnet

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect ASP.NET ViewState vulnerabilities in WebForms applications?▼

Detect ASP.NET ViewState vulnerabilities by fingerprinting the target deployment to surface signed-only ViewState states and machineKey misconfigurations. This process helps security teams identify exposure and prioritize remediation for enterprise WebForms applications.

What causes cross-node MAC validation failures in SharePoint deployments?▼

Cross-node MAC validation failures in SharePoint deployments stem from misconfigured machineKey settings across server nodes. Analyzing these deserialization surfaces reveals configuration mismatches that enable attackers to forge ViewState payloads.

Can I use this skill to fingerprint WCF and IIS framework versions?▼

Yes, you can fingerprint WCF and IIS framework versions by running the skill against target endpoints. It correlates basic metadata and ASP.NET error page awareness to determine the framework version and ViewState configuration without exfiltrating sensitive data.

How do I triage legacy deserialization sinks in enterprise .NET applications?▼

Triage legacy deserialization sinks in enterprise .NET applications by identifying misconfigurations like signed-only ViewState and cross-node MAC failures. The skill translates these surface exposures into guided remediation steps for security teams.

Do I need target endpoint access to scan for machineKey misconfigurations?▼

Yes, you need target endpoint access to scan for machineKey misconfigurations. The skill requires endpoint reachability, awareness of ASP.NET or WebForms error pages, and basic metadata to accurately correlate findings and surface vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
chrismcmackenchrismcmacken

review-artifacts

Triage artifact scan results to surface reportable bug bounty findings.

Community
Intermediate
Kisilev13Kisilev13

hunt-aspnet

Identify and exploit ASP.NET vulnerabilities including ViewState deserialization and machineKey recovery.

Community
Advanced
elementalsoulselementalsouls
3.3k

hunt-aspnet

Identify and validate ASP.NET deserialization and misconfiguration vectors across Webforms, WCF, and SharePoint.

Community
Advanced
cybersecwomancybersecwoman
5

hunt-aspnet

Identify and exploit ASP.NET vulnerabilities like ViewState deserialization and machineKey recovery.

Community
Advanced