Curated security research, vulnerabilities, advisories and tools for practitioners.

#dotnet

Security coverage tagged dotnet.

1.

CILFI: Automatic Function Identification in .NET Binaries

blog | 2026-08-04 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #tools | #pattern-matching

2.

The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

research | 2026-07-21 13:16 | jfrog.com | original ↗ | #supply-chain | #typosquatting | #dotnet

3.

Why Custom Attributes in .NET give me Nightmares

blog | 2026-05-30 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #file-format | #dotnet

4.

Addressing Common Misconceptions about .NET in the InfoSec World

blog | 2026-02-21 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #malware-analysis | #infosec

5.

Hannibal Stealer: A Deep Technical Analysis

research | 2025-08-01 00:00 | netlas.io | original ↗ | #malware | #credential-theft | #threat-analysis

6.

FileFlows Vulnerabilities - SQL Injection by Decompiling .NET Code

research | 2025-06-11 23:03 | projectblack.io | original ↗ | #sql-injection | #vulnerability | #decompilation

7.

Recovering Metadata from .NET Native AOT Binaries

blog | 2025-04-18 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #ghidra | #tools

8.

Embracing Dependency Injection in ASP.NET for Loose Coupling and Testability

blog | 2024-02-21 03:15 | hackerone.com | original ↗ | #hackerone | #ioc | #software-design

9.

Leveraging Async/Await in ASP.NET for Enhanced Performance

blog | 2024-01-29 01:23 | hackerone.com | original ↗ | #performance | #asp-net | #concurrency

10.

Awaiting the Awaitables - Building the AwaitFuscator

blog | 2024-01-21 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #obfuscation | #compilers

11.

Avoiding N+1 Database Queries in ASP.NET: A Practical Guide

blog | 2024-01-17 01:09 | hackerone.com | original ↗ | #performance | #database | #orm

12.

A problem with .NET Self-Contained Apps and how to pop calculators in dnSpy

blog | 2023-09-23 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #vulnerability | #tools

13.

How small is the smallest .NET Hello World binary?

blog | 2023-07-08 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #file-format | #dotnet

14.

What really is the Entry Point of a .NET Module?

blog | 2023-03-04 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #dotnet | #runtime

15.

Confusing .NET Debuggers: Proxy Objects

blog | 2023-01-08 11:00 | blog.washi.dev | original ↗ | #obfuscation | #debugger | #dotnet

16.

Confusing .NET Decompilers: The CallVirt OpCode

blog | 2022-11-21 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #decompiler | #dotnet

17.

Confusing .NET Decompilers: The Call OpCode

blog | 2022-11-06 00:00 | blog.washi.dev | original ↗ | #reverse-engineering | #decompiler | #dotnet

18.

Malware development part 9 - hosting CLR and managed code injection

blog | 2021-06-17 00:00 | 0xpat.github.io | original ↗ | #red-team | #dotnet | #code-injection

19.

What To Look For When Reviewing C#

blog | 2020-02-12 00:00 | hackerone.com | original ↗ | #code-review | #performance | #aspnet

20.

Halloween Hacks and How to Avoid Them #SecOps Edition

incident | 2018-10-26 00:00 | bugcrowd.com | original ↗ | #java | #client-side-security | #obfuscation