awesome-dotnet-security

.NET Security Resources

A curated collection of security resources and tools for .NET applications

Awesome .NET Security Resources

GitHub

505 stars
24 watching
53 forks
last commit: about 4 years ago
Linked from 1 awesome list

awesomeawesome-listdotnetdotnet-coredotnet-frameworksecuritysecurity-testingsecurity-toolsstatic-analysis

Tools / Libraries

.NET Core Security Headers267almost 3 years agoMiddleware for adding security headers to an ASP.NET Core application
NetEscapades.AspNetCore.SecurityHeaders704almost 2 years agoSmall package to allow adding security headers to ASP.NET Core websites
HtmlSanitizer1,573about 2 years agoCleans HTML to avoid XSS attacks
JWT .NET2,145almost 2 years agoJwt.Net, a JWT (JSON Web Token) implementation for .NET
NWebsec544over 3 years agoSecurity libraries for ASP.NET
AspNetSaml373almost 2 years agoSAML client library, allows adding SAML single-sign-on to your ASP.NET app
AspNetCoreRateLimit3,122about 2 years agoPackage that will let you set rate limits for your .NET Core Api

Tools / Static Code Analysis

GuardRailsContinuous verification platform that integrates tightly with leading version control systems
Security Code Scan942about 2 years agoVulnerability Patterns Detector for C# and VB.NET
Puma Scan448almost 4 years agoPuma Scan is a .NET software secure code analysis tool providing real time, continuous source code analysis
DevSkim920almost 2 years agoDevSkim is a set of IDE plugins and rules that provide security "linting" capabilities
SonarQube802almost 2 years agoSonarC# and SonarVB are static code analyser for C# and VB.​NET languages used as an extension for the SonarQube and SonarCloud platforms. It will allow you to produce stable and easily supported code by helping you to find and to correct bugs, vulnerabilities and smells in your code

Tools / Vulnerabilities and Security Advisories

RetireNET178almost 5 years agoCLI extension to check your project for known vulnerabilities
OWASP Dependency Check6,547almost 2 years agoDetects publicly disclosed vulnerabilities in application dependencies

Tools / Vulnerabilities and Security Advisories / OWASP Dependency Check

NuGet tool packageNuget tool package for OWASP Dependency Check

Tools / Vulnerabilities and Security Advisories

Audit.NET55about 3 years agoIdentify known vulnerabilities in .net NuGet dependencies
Snyk4,979almost 2 years agoCLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
.NET Security Announcements1,301about 4 years agoWatch this repo to receive security announcements in .NET Core
Snyk Vulnerability DBCommercial but free listing of known vulnerabilities in NuGet libraries
Common Vulnerabilities and ExposuresVulnerabilities in .NET Core that were assigned a CVE
National Vulnerability Database.NET related known vulnerabilities in the National Vulnerability Database

Educational / Hacking Playgrounds

WebGoat.NET226almost 3 years agoOWASP WebGoat.NET
Damn Vulnerable Thick Client App146about 6 years agoDVTA is a Vulnerable Thick Client Application developed in C# .NET
ASP.NET Vulnerable SiteOnline .NET application that can be used to practice hacking

Educational / Articles, Guides & Talks

Anti-Request ForgeryPrevent Cross-Site Request Forgery (XSRF/CSRF) attacks
Prevent Cross-Site ScriptingPrevent Cross-Site Scripting (XSS)
Protect Secrets in DevelopmentSafe storage of app secrets in development
.NET Security Cheat SheetQuick, basic .NET security tips for developers
Hardening the security of your ASP.NET core appsLessons learned after a third-party penetration test
Secure Coding GuidelinesMicrosoft's take on secure coding guidelines
Security HeadersAdding Default Security Headers in .NET Core
The ASP.NET Core security headers guideAnother take on adding security headers in ASP.NET Core
Security Best Practices for ASP.NET MVCBuilding Secure ASP.NET MVC Web Applications

Other / Reporting Bugs

Report a Security Issue

Backlinks from these awesome lists:

More related projects: