Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I know there are tools out there that will let you see the content of asp.net viewstate. Is it possible to see and modify the content of viewState if it has been encrypted by adding the <machineKey ... /> node to the web.config?
Sure. ViewState is simply
base64encoded (unless you specify that it should be encrypted). Here’s a link to someone that wrote a ViewState viewer. Here’s another by Fritz Onion. You probably will not be able to directly modify theViewState(i.e. outside of code) because ASP.NET has checks in place to specifically ensure that nothing has tampered with theViewState. See the EnableViewStateMAC setting for more.Update
Thanks to link rot, the links to the various viewers are no longer valid. However, a simple search for “viewstate viewer” can find others on the Internet such as ASP.NET ViewState viewer