Skip to content
cyberwordlists
Fuzzing608 KB

ASP.NET Default MachineKeys

Known/leaked ASP.NET validationKey,decryptionKey pairs (machineKey secrets) for testing ViewState deserialization and forged-token attacks.

View source
Size
608 KB
Category
Fuzzing
Source
swisskyrepo/PayloadsAllTheThings
License
MIT
Recommended tools
burpnuclei

Preview

First 15 entries. Download or copy the full list (608 KB) using the buttons above.

>head aspnet-default-machinekeys-patt.txt608 KB
F2D27DF0348E9A3EAD6AC66330C31F821394D4CD1A5E139EEE85EA9D9F2A963E55EC87572F699FB834292CC9E37AD56B6B26AA379106CBA5E9AA544C688F3E92,F6D5A5C8DDEC57481610829F58D6C95BDAC5FA21082F3FA9CB5A36DCEAACBEDB
CB2721ABDAF8E9DC516D621D8B8BF13A2C9E8689A25303BF,E9D2490BD0075B51D1BA5288514514AF
EDB59F017A178C9095805B88666496F8A6E24761256AE27F8F8994B07F5D9BBD2499F9560967849067899CE234D8E4769CF0AEE99474FA7A6F67D4E62E7F5650,8FFD993C85C8464EA7C117CA0CDB37572B60ECA8BABAA76C6BC94994CA115ECE
086BA0EB24E1A622F477B52C19C30A4069A0472CB089F6B80667368450C275CD9F649EC5DB9F8BCCD7B25E286F52852E956B0CD638EAE29E0B6B47F0A8FE6133,00B978835A8B45E0E11422C5F56E626306320DBFFCC6F3121D34AB8D32616E80
A0FF8AAEEF61C0F962B18DA75FC2FCB2113255870C45C3C695FF2F98652A665DEE2F57A7CA4236F17423EC0D7B6CE0F8BE25323D0FF4BA7DBB3113451709A781,5C66D9C8F48669CF12EA7E69EBEB2C2C2775F37DAFA3AF49
56AB7132992003EE87F74AE4D9675D65EED8018D3528C0B8874905B51940DEAF6B85F1D922D19AB8F69781B2326A2F978A064708822FD8C54ED74CADF8592E17,A69D80B92A16DFE1698DFE86D4CED630FA56D7C1661C8D05744449889B88E8DC
87AC8F432C8DB844A4EFD024301AC1AB5808BEE9D1870689B63794D33EE3B55CDB315BB480721A107187561F388C6BEF5B623BF31E2E725FC3F3F71A32BA5DFC,E001A307CCC8B1ADEA2C55B1246CDCFE8579576997FF92F7
F1ABAEE7E733A4CE4771C27EA79021D992E47B8801A3618305F9820F468FB193C63A21485DEFD0F51A5D8FD31B5A5BAA968DD456B9F7BC575F8B61A662E8972C,DDABD235C8B46113985005507B476F468D4C283F2C14989F
0EBBA00DA053E328AB97A4E5C5776BB9B6942A68858824A06F41F426E315AD08692E8D161CC964621C4812D1E661D41DB2E80D714D9665D6B715A10B8269D74D,372312838EDA93BB0F1865733FDC6ACC5A1AFD7F9CBD0604
3C5D2E795AFEF355E5656AF3A7C0A7167C25A32D174FDD92C375F97924239162A5FDFAA8119F6474E6D1EAB6D41128322719D937EBFA9A360E77D4B11580F5F8,637960D51A1036252D15CBADBA9C1732B8D5DF4AA71F6B9545B560F485333DF0
0EBBA00DA053E328AB97A4E5C5776BB9B6942A68858824A06F41F426E315AD08692E8D161CC964621C4812D1E661D41DB2E80D714D9665D6B715A10B8269D74D,372312838EDA93BB0F1865733FDC6ACC5A1AFD7F9CBD0604
8583A4EC1C9C73F83013BC508FF6D5501DCD628D5740E37C21761056862FBCD96E3E41706073121A1DC329F8FE5A1C2EBC3B3BBFA9A66AF446ABB0DCCC225E04,E852249323C54848DAAC8B4E18939D898B25FFD50887D095
B710815F55E22A33A906AB623FD4D6C2F7CFA8E318C73E206367E2B7BC551F496E2CEB168EE9EEBABB8856B49203F613610C718A1D55F9324595A8AC7A50960A,A66853D79C1859AB168DA9308EAB82F9FDB7F067A6EEEF8895B4F4939751E2E8
DB7A67C340F1646C37F5795F16D8F6D022EC524C3FBEF8E685E0A3862EBD6CFC34FFC591BF741DB676BC22C0135301F0C34BC857C75182FD6C38BC271DA7B4C4,159C53F3041BACD4DEC5C552640810921B80DCBF7E2FD9D3
CD13B657DE510907D7B33AD293720E0D6B20694EFA23DF68C4B1FF115E5D20DC7A0956BA0A173587D702FC9E9EEBAF727CFE23E354075CFA5232EF9603EE64B5,D937C0BA1F75C95CDE3455D3B36AC86406975D1CB3AA7D70F9165D48395E1114

Known/leaked ASP.NET validationKey,decryptionKey pairs (machineKey secrets) for testing ViewState deserialization and forged-token attacks.

This list is geared toward input fuzzing and vulnerability discovery. It contains roughly 608 KB and pairs well with tools such as burp, nuclei. Pick the smallest list that fits your engagement: shorter lists are faster and quieter for online attacks, while larger lists give broader coverage for offline work where speed is less of a constraint.

You can copy the sample preview straight from this page, copy the entire list to your clipboard, or download the raw .txt file. The full list is served directly from its upstream source on GitHub.

Sourced from swisskyrepo/PayloadsAllTheThings and distributed under MIT. Only use wordlists against systems you are explicitly authorized to test.