ASP.NET
Microsoft's framework for building web apps on .NET.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- FrameworkASP.NET
- Web Server
- Runtime
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- Data
ASP.NETFramework and Libraries
See It in the Stack
About
ASP.NET is Microsoft's framework for web applications and services. It runs on the .NET runtime, usually inside IIS, and underpins products such as SharePoint and Exchange. ASP.NET Core is the modern cross-platform version.
How to Spot It
These are signs that a system runs ASP.NET, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Response header
X-AspNet-Version: 4.0.30319- Cookie
ASP.NET_SessionId- Page source
A hidden __VIEWSTATE form field
If It Has a Flaw
A flaw in the ASP.NET framework can affect every application built on it. A flaw in one application reaches only that application.
A flaw exposes what runs on it and the data it reaches.
- Application
SharePoint
Exchange ServerMOVEit Transfer- Data
SQL Server
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach ASP.NET.
Stacks and Code
ASP.NET is part of the common stacks below, and each stack's page shows who runs every layer. Its code arrives from the sources listed, and each source's page says how bad code could get in through it.
- In Common Stacks
- SharePoint, On PremisesExchange, On Premises
- Its Code Comes From
NuGetCI and Build SystemsVendor Updates