Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Scanning telerik ajax control

David | Last updated: Jan 23, 2021 05:34AM UTC

Hi. 1) I am using telerik control for my asp.net website. Telerik component url: https://www.telerik.com/products/aspnet-ajax.aspx Do you have something like a template to test vulnerabilities of pages using this component? or is there any extensions to test it? 2) For online-forms under asp.net (webforms), do you have guidance or tool/extension? For example; testing submission of injection for any fields. Is this kind of testing part of the default, or do i have to configure it?

Uthman, PortSwigger Agent | Last updated: Jan 25, 2021 10:18AM UTC

Hi David, We do not have any extensions specific to Telerik so I would suggest using a combination of active scans and any extensions on the BApp Store you find to be relevant. This article looks promising: - https://captmeelo.com/pentest/2018/08/03/pwning-with-telerik.html In relation to ASP, specifically, you can try using 'Attack Surface Detector' (https://portswigger.net/bappstore/47027b96525d4353aea5844781894fb1) Alternatively, you can try writing your own extension using the Extender API: - https://portswigger.net/burp/extender/api/ - https://portswigger.net/burp/extender

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.