Exploiting MVC Model Binding

Dinis Cruz

Table of Contents

1. July 2013
- MVC ModelBinding Vulnerability in Contoso University sample (first raw PoC)
2. October 2012
3. December 2012
- ASP.NET MVC - XSS and AutoBind Vulns in MVC Example app (from 2008)
- ASP.NET Support in SAST and IBM F4F
4. January 2013
- OData ASP.NET Web API: An Mass Assignment vulnerability in the making?
- Should Mass Assignment be an OWASP Top 10 Vulnerability?
5. September 2008
6. September 2009
7. October 2011
8. April 2012
- Some proposed Visions for next OWASP Summit
- Why ASP.NET MVC is ‘insecure by design’ , just like Spring MVC (and why SAST can help)

5. September 2008

Up next

6. September 2009