hunt-saml

Detect and exploit SAML/SSO authentication vulnerabilities in web applications.

Updated Jun 18, 2026

Search Tags:#vulnerability assessment #sso #saml #xml signature wrapping #comment injection

Ready to run

npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-saml-kisilev13

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-saml
Source: https://github.com/Kisilev13/Hermes-Agent-Workspace/tree/main/skills/hunt-saml
Command: npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-saml-kisilev13

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires samlraider, samlmagic, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill helps identify and exploit vulnerabilities in SAML/SSO authentication mechanisms, enabling security professionals to protect against common attack patterns.

Core Features & Use Cases

SAML Endpoint Detection: Automatically detect SAML endpoints in web applications.
Attack Vector Analysis: Analyze and exploit various attack vectors such as XML Signature Wrapping, Comment Injection, and Signature Stripping.
Tools Integration: Integrates with tools like SAML Raider and samlmagic for efficient testing.
Use Case: Detect and exploit SAML vulnerabilities in a web application to gain unauthorized access to sensitive information or administrative accounts.

Quick Start

Use the hunt-saml skill to scan for SAML vulnerabilities in the web application at https://example.com.

Frequently Asked Questions about hunt-saml

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I test for SAML vulnerabilities in a web application?▼

SAML vulnerabilities are tested by detecting authentication endpoints and analyzing attack vectors like XML Signature Wrapping. This skill automates endpoint discovery and integrates with SAML Raider and samlmagic for efficient vulnerability assessment.

What is XML Signature Wrapping in SSO authentication?▼

XML Signature Wrapping is a SAML attack vector that manipulates XML structure to bypass signature verification. This skill analyzes this vulnerability alongside Comment Injection and Signature Stripping to identify SSO authentication weaknesses.

Do I need SAML Raider and samlmagic to scan for SSO vulnerabilities?▼

Yes, SAML Raider and samlmagic are required dependencies. The skill integrates with these tools to perform vulnerability testing and exploit SAML authentication vectors in target web applications.

Can I detect SAML endpoints automatically during a vulnerability assessment?▼

Yes, SAML endpoint detection is automated. The skill scans web applications to automatically detect SAML endpoints and analyzes associated attack vectors to identify unauthorized access vulnerabilities.

What attack vectors are commonly exploited in SAML authentication?▼

Common SAML attack vectors include XML Signature Wrapping, Comment Injection, and Signature Stripping. This skill analyzes and exploits these vectors to identify unauthorized access to sensitive information or administrative accounts.

When should I perform a SAML vulnerability assessment?▼

A SAML vulnerability assessment should be performed on web applications using SAML for SSO authentication. It is necessary to verify security configurations and protect against unauthorized access to sensitive information.