Padding Oracle Vulnerability
Explanations
- http://blogs.microsoft.co.il/blogs/linqed/archive/2010/09/19/padding-oracle-asp-net-vulnerability-explanation.aspx
- http://bernardodamele.blogspot.co.uk/2011/04/ms10-070-padding-oracle-applied-to-net.html
- http://blog.mindedsecurity.com/2010/09/investigating-net-padding-oracle.html
- http://threatpost.com/en_us/blogs/demo-aspnet-padding-oracle-attack-091710
- http://blog.gdssecurity.com/labs/2010/9/14/automated-padding-oracle-attacks-with-padbuster.html
Good theory