In this video we show how to use POET to attack the latest version of ASP.NET. The target application is DotNetNuke. The attack consists of two phases: 1. In the first phase, we use POET to extract DotNetNuke's secret keys, and use those keys to generate a cookie to login as a super user. The same technique can be used to attack _every_ ASP.NET application. 2. In the second phase, we use Ces
![POET vs ASP.NET: DotNetNuke](https://cdn-ak-scissors.b.st-hatena.com/image/square/6a7cc1caf8d91a41f9bdcaf526c0b9436021790b/height=288;version=1;width=512/https%3A%2F%2Fi.ytimg.com%2Fvi%2FyghiC_U2RaM%2Fhqdefault.jpg)