SAMLRaider

SAML Raider - Extensión SAML2 para Burp Descripción SAML Raider es una extensión de Burp Suite para probar infraestructuras SAML. Contiene dos funcionalidades principales: manipular mensajes SAML y gestionar certificados X.509. Este software fue creado por Roland Bischofberger y Emanuel Duss...

CVE-2020-5390

A verification flaw was found in python-pysaml2, where it did not check that the signature in a SAML document was enveloped, which enabled XML signature wrapping XSW attacks. A remote attacker could exploit this flaw to convince SAML processing to verify the signature and accept malicious data...

SAML Raider - SAML2 Burp Extension

SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachelor thesis at the Hochschule für Technik...