title: Exploitable C# Functions
body: <p>This question is similar to <a href="https://stackoverflow.com/questions/3115559/exploitable-php-functions/3697776#3697776">Exploitable PHP Functions</a>.</p>
  
  <p>Tainted data comes from the user,  or more specifically an attacker.  When a tainted variable reaches a sink function,  then you have a vulnerability.  For instance a function that executes a sql query is a sink,  and GET/POST variables are sources of taint. </p>
  
  <p>What are all of the sink functions in C#?  I am looking for functions that introduce a vulnerability or <a href="http://cwe.mitre.org/data/slices/2000.html" rel="noreferrer">software weakness</a>.  I am particularly interested in Remote Code Execution vulnerabilities.  Are there whole classes/libraries that contain nasty functionally that a hacker would like to influence?   How do people accidentally make dangerous C# code? </p>