saml

What problem does it solve?

This Skill helps security engineers and penetration testers identify and analyze protocol-level vulnerabilities in SAML authentication flows, including malformed assertions, metadata weaknesses, and binding-specific weaknesses, enabling authorized validation and remediation of SAML deployments.

Core Features & Use Cases

• Flow Analysis: Decode and inspect SP-initiated and IdP-initiated SAMLRequest and SAMLResponse payloads to verify InResponseTo, assertion conditions, and signature placement.
• Metadata & Certificate Extraction: Extract and analyze SP/IdP metadata to find exposed ACS endpoints, signing certificates, and entity IDs useful for golden SAML assessments or misconfiguration checks.
• Binding-Specific Testing: Differentiate testing approaches for HTTP-POST and HTTP-Redirect bindings including deflate/base64 decoding and injection surfaces.
• Use Case: During an authorized penetration test, use this Skill to decode a captured SAMLResponse, validate its signature and timestamps, and enumerate metadata for missing protections or exploitable endpoints.

Quick Start

Analyze the provided SAMLResponse and SP/IdP metadata and list any assertion signature issues, missing InResponseTo checks, or binding-specific misconfigurations that could be exploited.