By language
Security testing for .NET and C# applications.
.NET powers enterprise web apps and APIs. Insecure deserialization, injection, XXE, and access-control flaws are the classic risks, with deserialization historically among the most severe.
Common .NET pitfalls
Insecure deserialization (e.g. legacy BinaryFormatter on untrusted input), SQL injection, XXE, and SSRF are recurring. Enterprise apps accumulate authorization inconsistencies over time.
Framework focus
ASP.NET provides strong primitives, but authorization must be verified at both function and object level across roles.
Key risks to test
FAQ
What are common .NET security vulnerabilities?
Insecure deserialization (notably legacy BinaryFormatter on untrusted data), SQL injection, XXE, SSRF, and access-control gaps in ASP.NET applications are the most impactful .NET risks.
Impactr finds and proves whether flaws like this are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.