Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework (CVE-2023-36899) | Soroush Dalili (@irsdl) Blog

https://soroush.me/blog/2023/08/cookieless-duodrop-iis-auth-bypass-app-pool-privesc-in-asp-net-framework-cve-2023-36899/

https://twitter.com/home/status/1689071945701277696

https://twitter.com/home/status/1689084150559682560

https://twitter.com/home/status/1689095964122849280

https://twitter.com/home/status/1689131306104635392

https://twitter.com/home/status/1689150129452802048

https://twitter.com/home/status/1689151973629874176

https://twitter.com/home/status/1689167372622454784

https://twitter.com/home/status/1689201491045969920

https://twitter.com/home/status/1689204152050585601

https://twitter.com/home/status/1689220505218207745

https://twitter.com/home/status/1689265175705407488

https://twitter.com/home/status/1689282888922009600

https://twitter.com/home/status/1689287861646831618