.NET
Microsoft's runtime for C# and other .NET languages.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- Framework
- Web Server
- Runtime.NET
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- Data
.NETRuntime
About
.NET is Microsoft's runtime that runs code written in C# and other .NET languages. ASP.NET applications run on it, usually inside IIS on Windows, though modern .NET also runs on Linux. It is a rival to PHP, Node.js and Java, not a layer above them.
How to Spot It
These are signs that a system runs .NET, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Response header
Server: Kestrel- Response header
X-AspNet-Version: 4.0.30319
If It Has a Flaw
A flaw in the .NET runtime can reach every .NET application on the machine, below the level of any single app's defences.
A flaw exposes what runs on it and the data it reaches.
- Application
SharePoint
Exchange ServerMOVEit Transfer- Framework and Libraries
- ASP.NET
- Data
SQL Server
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach .NET.
Stacks and Code
.NET is part of the common stacks below, and each stack's page shows who runs every layer. Its code arrives from the sources listed, and each source's page says how bad code could get in through it.
- In Common Stacks
- SharePoint, On PremisesExchange, On Premises
- Its Code Comes From
NuGetVendor Updates