Added Blazor Pentesting

hideckies · Nov 30, 2024 · 2f3cb44 · 2f3cb44
1 parent 8b54414
commit 2f3cb44
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 0 deletions.
diff --git a/src/exploit/web/framework/dotnet/_data.yml b/src/exploit/web/framework/dotnet/_data.yml
@@ -0,0 +1 @@
+category3: dotnet
diff --git a/src/exploit/web/framework/dotnet/blazor-pentesting.md b/src/exploit/web/framework/dotnet/blazor-pentesting.md
@@ -0,0 +1,26 @@
+---
+title: Blazor Pentesting
+description: Blazor is a web framework for building interactive web applications using C# instead of JavaScript.
+tags:
+    - .NET
+    - Web
+refs:
+date: 2024-11-30
+draft: false
+---
+
+## Common Directories/Files
+
+```bash
+# This file contains paths of DLLs that can be reversed.
+/_framework/blazor.boot.json
+/_framework/<Example>.dll
+```
+
+<br />
+
+## Reverse Engineering DLLs
+
+We can reverse DLLs such as `/_framework/<Example>.dll` using tools such as **DotPeek** for retrieving sensitive information (credentials, software versions, etc.).
+
+If you use DotPeek, right-click on the name in Assembly Explorer and click **Decompiled Sources** for investigation.