hunt-saml

SAML vulnerabilities are tested by detecting authentication endpoints and analyzing attack vectors like XML Signature Wrapping. This skill automates endpoint discovery and integrates with SAML Raider and samlmagic for efficient vulnerability assessment.

XML Signature Wrapping is a SAML attack vector that manipulates XML structure to bypass signature verification. This skill analyzes this vulnerability alongside Comment Injection and Signature Stripping to identify SSO authentication weaknesses.

Yes, SAML Raider and samlmagic are required dependencies. The skill integrates with these tools to perform vulnerability testing and exploit SAML authentication vectors in target web applications.

Yes, SAML endpoint detection is automated. The skill scans web applications to automatically detect SAML endpoints and analyzes associated attack vectors to identify unauthorized access vulnerabilities.

Common SAML attack vectors include XML Signature Wrapping, Comment Injection, and Signature Stripping. This skill analyzes and exploits these vectors to identify unauthorized access to sensitive information or administrative accounts.

A SAML vulnerability assessment should be performed on web applications using SAML for SSO authentication. It is necessary to verify security configurations and protect against unauthorized access to sensitive information.