saml-sso-assertion-attacks

Test SAML SSO assertion attacks by executing a full login flow against the target to identify signature validation gaps, audience binding issues, and trust boundary weaknesses across IdP and SP configurations. It provides rapid triage findings and remediation guidance.

A SAML assertion wrapping attack exploits signature validation failures by manipulating XML parsing boundaries to inject unverified assertions. This Skill evaluates correct signing nodes and wrapping scenarios to surface where signature coverage is incomplete or improperly enforced.

Check SAML SSO replay vulnerability by comparing IdP-initiated versus SP-initiated flows to surface misconfigurations and replay risks. This Skill validates NotBefore and NotOnOrAfter enforcement, ACS endpoint handling, and recipient binding to identify exposure.

Yes, this SAML testing approach is applicable to enterprise SSO deployments using SAML requests and responses. It analyzes IdP and SP flows, ACS endpoints, and XML parsing boundaries to evaluate validation coverage and resilience against replay or wrapping attempts.

Validate SAML audience and issuer trust by analyzing audience restriction, recipient handling, and ACS configurations across IdP and SP deployments. This Skill identifies misconfigurations in issuer trust and improper audience binding that could weaken authentication boundaries.

SAML signature presence alone does not guarantee secure authentication because wrapping attacks can bypass validation if the wrong signing node is verified. This Skill evaluates signature coverage depth and proper enforcement to ensure trust boundaries remain intact.