Lightlines
By yaklang

saml-sso-assertion-attacks

yaklang3.3k installs

Find assertion trust flaws in SAML sign-ins.

What it does

Checks SAML login flows for assertion-validation flaws and trust-boundary weaknesses.

When to use it

Use when a target uses SAML-based SSO and assertion trust needs validation.

How to use it

Give it a SAML SSO target; it checks the login flow for assertion-trust weaknesses.

What you provide

  • a SAML SSO target

Latest review

What you need · 0

No setup requirements listed.


Access · 2

This skill

SAML SSO login endpoints

Write

Tests altered SAML assertions

SAML SSO login traffic

Read

Captures SAML login traffic