Blazor Config Exposure Scanner

Blazor is a web framework developed by Microsoft used for building interactive web applications. It enables developers to use C# alongside HTML and CSS for web app development. Due to its integration with Microsoft's tech stack, it's largely adopted in enterprises that rely on .NET technologies. Blazor provides a client-side framework to execute code in web browsers via WebAssembly. Its productivity aspects are appreciated by developers who prefer full-stack development using a single language. As companies continue transitioning to rich web-based applications, Blazor’s popularity is gradually increasing.

The Config Exposure vulnerability occurs when sensitive configuration files are inadvertently made accessible publicly. Such exposures can provide attackers with valuable insights into the application's internal structure. Specifically, in the case of Blazor, the exposure of the Blazor Boot config file could disclose information about compiled DLLs and other configuration settings. This information can help attackers strategize further attacks on the application's underlying framework. The vulnerability is often logged as an informational risk but holds potential if paired with other vulnerabilities.

The vulnerability in Blazor involves exposure of the configuration file typically named 'blazor.boot.json'. This endpoints may contain 'Blazor' and '"config":' keywords to ascertain exposure. Concern arises due to its listing of DLL files, which may contain assemblies used within the application. The discovered DLL names might aid in identifying the structure or specific libraries used in the application. It serves as a valuable asset for understanding the ecosystem wrapping the Blazor application. When exposed, it can act as a guide for malicious actors in designing targeted exploitation vectors.

Exploiting this exposure could serve as reconnaissance data for attackers aiming to exploit other vulnerabilities within the application. If exploited, attackers could potentially prepare more sophisticated attacks or exploit dependent vulnerabilities inherent in improperly configured assemblies or dependencies listed in these files. This could also lead to targeted attacks on identified libraries that might have known vulnerabilities. The impact depends on what configurations and libraries are exposed, their importance, and any existing security controls.

REFERENCES

• https://github.com/freakyclown/Nuclei_templates/blob/main/blazor_server.yaml