hunt-saml

This Skill identifies XML Signature Wrapping vulnerabilities in SAML responses by scanning for XSW attack vectors, Comment Injection, and Signature Stripping during security auditing and red teaming exercises.

Yes, you can scan Microsoft ADFS endpoints for SSO vulnerabilities. The Skill focuses on identifying common SAML endpoints and Microsoft ADFS endpoints to uncover potential security risks in single sign-on systems.

The best way to exploit SAML vulnerabilities during red teaming is by leveraging practical exploitation scenarios. The Skill integrates SAML Raider and samlmagic to manipulate XML and test real-world implementations like Auth0 and Okta.

Yes, this SSO security auditing tool works with Auth0 and Okta. It provides practical exploitation scenarios and real-world examples for testing Auth0, Okta, Microsoft, and custom SAML implementations.

You identify XXE attack vectors in SAML systems by running the Skill to detect SAML-specific vulnerabilities. It focuses on uncovering XXE, XML Signature Wrapping, and Comment Injection vectors in targeted endpoints.