[]()

The goal of this project is to accumulate the [secret keys]( “secret keys” ) / secret materials related to various web frameworks, that are publicly available and potentially used by developers. These secrets will be utilized by the Blacklist3r tools to audit the target application and verify the usage of these pre-published keys.

We are releasing this project with.Net machine key tool to identify usage of pre-shared Machine Keys in the application for [encryption]( “encryption” ) and [decryption]( “decryption” ) of forms [authentication]( “authentication” ) cookie.

Note: Requires Visual Studio 2019, not 2022. Visual Studio 2022 does not support .NET Framework 4.5, which this repo relies on.

## References:

* [Project Blacklist3r]( “Project Blacklist3r” )
* [Identify and Exploit ViewState Deserialization]( “Identify and Exploit ViewState Deserialization” )

## Mention

* [ASP.NET ]( “ASP.NET” )[Cryptography]( “Cryptography” ) for Pentesters
* [Customising Blacklist3r for OWIN OAuth Access Tokens]( “Customising Blacklist3r for OWIN OAuth Access Tokens” )

**[Download Blacklist3r]( “Download Blacklist3r” )**Read More