hunt-saml
OfficialExploit SAML/SSO flaws to map admin access.
Authorchatbotkit
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill enables security researchers to identify and validate SAML/SSO vulnerabilities (XML Signature Wrapping, NameID manipulation, signature stripping, and related flaws) to assess federation risk across IdP-SP trust boundaries.
Core Features & Use Cases
- Attack patterns: XML Signature Wrapping (XSW), NameID manipulation, signature stripping, and XXE in SAML assertions.
- Endpoint discovery & testing: identify critical SAML endpoints such as /saml/acs, /sso/saml, and IdP/SP configurations to validate resilience.
- Triage & remediation guidance: provide steps to reproduce in controlled environments and map mitigation strategies.
Quick Start
Run a controlled lab test to craft a SAML Response targeting the ACs endpoint and verify which assertion is processed first.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: hunt-saml Download link: https://github.com/chatbotkit/rook/archive/main.zip#hunt-saml Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 510,000+ vetted skills library on demand.