SAMLRaider

SAML Raider - Estensione SAML2 per Burp Descrizione SAML Raider è un'estensione di Burp Suite per testare infrastrutture SAML. Contiene due funzionalità principali: la manipolazione dei messaggi SAML e la gestione dei certificati X.509. Questo software è stato creato da Roland Bischofberger e...

CVE-2020-5390

A verification flaw was found in python-pysaml2, where it did not check that the signature in a SAML document was enveloped, which enabled XML signature wrapping XSW attacks. A remote attacker could exploit this flaw to convince SAML processing to verify the signature and accept malicious data...

SAML Raider - SAML2 Burp Extension

SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachelor thesis at the Hochschule für Technik...