ASP .NET Code analysis tool to check cross site scripting [closed] - asp.net

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
Questions asking us to recommend or find a tool, library or favorite off-site resource are off-topic for Stack Overflow as they tend to attract opinionated answers and spam. Instead, describe the problem and what has been done so far to solve it.
Closed 9 years ago.
Improve this question
I am aware of a tool which MS has provided which tells you about coss site scripting attack etc.
The tool is http://www.microsoft.com/downloads/details.aspx?FamilyId=0178e2ef-9da8-445e-9348-c93f24cc9f9d&displaylang=en
But are there tools which you have used for ASP .NET applications which do similar to this and which one is widely used in ASP .Net applications ?

Unfortunately CAT.NET is as good as dead so you can rule that one out.
In terms of XSS detection, if you're wanting to test vulnerabilities in an existing app you need not constrain yourself to static code analysis or .NET specific tools. There are plenty of language agnostic scanners out there you can run against the URL of an existing site.
One I've found very useful in the past is Netsparker from Mavituna Security. This is really easy to get up and running with (download it, enter a URL in a nice UI, run the scan) and the results are easily interpretable. You can grab a free community version which will identify persistent and reflective XSS (among other vulnerabilities) or pay for a licensed edition with a heap of additional features.

Are you thinking of the Web Protection Library?

Related

simple web based editor for documentation of an app [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
Questions asking us to recommend or find a tool, library or favorite off-site resource are off-topic for Stack Overflow as they tend to attract opinionated answers and spam. Instead, describe the problem and what has been done so far to solve it.
Closed 9 years ago.
Improve this question
I want a simple html and javascript based web page for editing a single document for documentation of an app that I am making. it should be editable by multiple people if possible asking for a password before it registers. I have ftp access to a web site but that is it. no database. I did not find anything that will point to a single file and just simply edit it without any software requirements. it would be nice if it were mobile friendly too.
I work for a hosting provider so that is a good question imo. What you are looking for is a flat file storage CMS to avoid a database. Requiring user management and simplicity you will not want to code this from scratch. We deal with alot of CMS (Content Management Systems) and most are bloated and require MySQL.
Check Out: http://get-simple.info/
I fired an installation up and it is very easy to install, has alot of features, and is very WordPress like which means it looks good out of the box and is very easy to use.
I hope this helps you out and if you do use it let me know your thoughts.

JSON Rpc libraries for use with .NET [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
Questions asking us to recommend or find a tool, library or favorite off-site resource are off-topic for Stack Overflow as they tend to attract opinionated answers and spam. Instead, describe the problem and what has been done so far to solve it.
Closed 9 years ago.
Improve this question
I am looking into JSON RPC libraries for .net that are free to use in commercial applications. Up until now i just seem to have found JROCK.
What other libraries, architecture have i got similar to JRock for .NET 2.0
What is the difference between a [WebMethod] in asmx web-service returning a instance of a class and a JSON Rpc method as in the JRock website page. Do i have any usability benefits, performance benefits or any benefits of using one over the other
JSON-RPC.NET http://jsonrpc2.codeplex.com/ is under a BSD license so you can use it in your commercial application. It has a ASP.net handler, but ASP.NET is not required. I have examples that run the server from a console application. It can work with sockets or pipes, or any transport you would like to plug into it. So you are not forced to use HTTP, but its there if you want to.
You should find that json rpc is more compact then asmx. It should reduce bandwidth, and could perform better for you, but you would want to test that.
I'm a contributer on the project, and would be interested to know if it meets your needs.

Alternative SSRS Front-ends [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
Questions asking us to recommend or find a book, tool, software library, tutorial or other off-site resource are off-topic for Stack Overflow as they tend to attract opinionated answers and spam. Instead, describe the problem and what has been done so far to solve it.
Closed 8 years ago.
Improve this question
Given that Sql Server Reporting Services is designed to be open and extendable, and that the bundled Report Manager isn't that great, are there any alternative open-source SSRS Front-ends out there?
By 'front-ends' I guess I mean web apps that can display the available reports on the reports server, gather the required parameters (hopefully in a more flexible way than Report Manager) and then run the reports. I'm imagining things that are built using the Asp.Net ReportViewer component, but have better parameter gathering.
I've found one on CodePlex: reportviewer.codeplex.com (edit: actually, this looks like a winforms solution, but its the closest I've found) ... but I'm wondering if there are others out there, cos this seems like an area in which lots of people have had to 'roll their own'.
To answer my own question: There didn't seem to be any alternative open-source SSRS Front-ends out there, so I have built one and open-sourced it:
CrissCross at Github
You point it at your SSRS server and then off it goes - it can display the report catalogue and lets users run any report. So far I've optimised it towards reports with lots of optional parameters and lots of multi-picks, but it should be able to handle any SSRS report. And if it can't, you can get stuck into the code and change it.
The main difference to the standard SSRS Report Manager is in the presentation of parameters: CrissCross is more ajaxy, and (being open-source) more customisable.
See the github site for more details.

I'm learning ASP.NET. Where can I find some (complete) sample website to study/analyse? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
Questions asking us to recommend or find a tool, library or favorite off-site resource are off-topic for Stack Overflow as they tend to attract opinionated answers and spam. Instead, describe the problem and what has been done so far to solve it.
Closed 9 years ago.
Improve this question
I have learnt most of the main skill points in ASP.NET model, eg how to use a GridView. I would like to find some complete website with source code to analyse/observe, but so far it seems on the internet most learning resources are dealing with a specific topic. Is it possible to find some?
There are lots of open source asp.net websites out there.
See this list from the Microsoft asp.net site, in particular the starter kits and samples section.
I suggest you download and install the free Web Platform Installer from Microsoft. In the tab Web Applications you can find a lot of ready made applications to learn from.
Check out this video: http://www.asp.net/general/videos/build-your-first-asp-net-application-with-asp-net-web-forms
It explains well where to start and how to create "Hello World" type of application.
Don't bother with Web Platform Installer/other advanced starting kits because they are too complex for someone new with the platform.
There seems to be a lack of sample asp.net websites with available source code. Note an open-source website does not mean you can obtain the website. You may have to buy the website to view the open source. However I did find a large number of real-world websites with available source code in Chinese.

Looking for the best Asp.net survey application [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
Questions asking us to recommend or find a book, tool, software library, tutorial or other off-site resource are off-topic for Stack Overflow as they tend to attract opinionated answers and spam. Instead, describe the problem and what has been done so far to solve it.
Closed 8 years ago.
Improve this question
Please give suggestions for best Asp.Net survey application with source code - commercial is fine..
The Survey Project is one of the most mature survey applications written in ASP.NET / C#. It's open source and has full source code available.
See here: http://www.surveyproject.info/
There are also some other survey applications and "engines" available with source code, although they don't seem to be as "mature" as the aforementioned "Survey Project".
http://surveywebpart.codeplex.com/
http://websurvey.codeplex.com/
http://surveymaster.codeplex.com/
For a commercial (read: costs money) solution, you can try:
NoviSurvey
which is a full-featured "enterprise" survey application, and has the option to purchase the source code (C# / ASP.NET).
SelectSurvey.NET
which is another "professional" survey application, with the option to purchase the source code (C# / ASP.NET).
Zodiac.NET
another commercial survey application with the option to purchase the source code.

Resources