Description

Detects unencrypted ASP.NET viewstate parameters in web applications. Unencrypted viewstates can expose sensitive server-side application state data to potential attackers, allowing them to view and potentially manipulate the application's state information. This is particularly critical for applications handling sensitive data or requiring strong security controls.

Detection Strategy

• Examines HTML responses for input elements named '__VIEWSTATE'

• Checks if the viewstate value can be decoded without encryption

• Reports a vulnerability if an unencrypted viewstate is found in the page content