C#

ASP.NET Core

ASP.NET Core is a cross-platform, high-performance, open-source framework for building modern, cloud-enabled, Internet-connected apps. It is developed by Microsoft.

Popularity: ASP.NET Core is the most popular .NET web application framework, according to StackOverflow’s 2022 Developer Survey.

DVCSA

• Description: Damn Vulnerable C# (Asp.Net core) application
• Source Code: https://github.com/codeFather2/dvcsa
• Findings: Cross Site Scripting, SQL Injection, Leaking Passwords
• Credentials: None

git clone https://github.com/codeFather2/dvcsa.git
cd dvcsa

# Run the application
docker-compose up -d

# Run a scan
nightvision target create dvcsa http://localhost:8999 --type api
nightvision swagger extract . -t dvcsa --lang dotnet
nightvision scan dvcsa

Note you can run the check-endpoint.sh script to demonstrate the vulnerabilities.

Vulnerable Core App

• Description: This project is a Vulnerable ASP.NET Core 2.0 Web Application.
• Source Code: https://github.com/vulnerable-apps/VulnerableCoreApp
• Findings: Cross Site Scripting
• Credentials: None

git clone https://github.com/vulnerable-apps/VulnerableCoreApp
cd VulnerableCoreApp/

# Run the application
docker-compose up -d

# Run a scan
nightvision target create VulnerableCoreApp http://localhost:5000 --type web
nightvision scan VulnerableCoreApp