Monday, August 31, 2020

Support For XXE Attacks In SAML In Our Burp Suite Extension


In this post we present the new version of the Burp Suite extension EsPReSSO - Extension for Processing and Recognition of Single Sign-On Protocols. A DTD attacker was implemented on SAML services that was based on the DTD Cheat Sheet by the Chair for Network and Data Security (https://web-in-security.blogspot.de/2016/03/xxe-cheat-sheet.html). In addition, many fixes were added and a new SAML editor was merged. You can find the newest version release here: https://github.com/RUB-NDS/BurpSSOExtension/releases/tag/v3.1

New SAML editor

Before the new release, EsPReSSO had a simple SAML editor where the decoded SAML messages could be modified by the user. We extended the SAML editor so that the user has the possibility to define the encoding of the SAML message and to select their HTTP binding (HTTP-GET or HTTP-POST).

Redesigned SAML Encoder/Decoder

Enhancement of the SAML attacker

XML Signature Wrapping and XML Signature Faking attacks have already been part of the previous EsPReSSO version. Now the user can also perform DTD attacks! The user can select from 18 different attack vectors and manually refine them all before applying the change to the original message. Additional attack vectors can also be added by extending the XML config file of the DTD attacker.
The DTD attacker can also be started in a fully automated mode. This functionality is integrated in the BurpSuite Intruder.

DTD Attacker for SAML messages

Supporting further attacks

We implemented a CertificateViewer which extracts and decodes the certificates contained within the SAML tokens. In addition, a user interface for executing SignatureExclusion attack on SAML has been implemented.

Additional functions will follow in later versions.

Currently we are working on XML Encryption attacks.

This is a combined work from Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, and Vladislav Mladenov.

The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

Read more


  1. Hacking Tools Free Download
  2. Pentest Tools Review
  3. Hacking Tools Hardware
  4. Hacker Tools For Ios
  5. Hacking Tools Pc
  6. Pentest Tools Linux
  7. Hack Tool Apk
  8. Underground Hacker Sites
  9. Hack Tools For Pc
  10. How To Hack
  11. What Is Hacking Tools
  12. Hacker Tools For Ios
  13. Best Hacking Tools 2019
  14. Game Hacking
  15. Hacking Tools Pc
  16. Free Pentest Tools For Windows
  17. Pentest Tools
  18. Pentest Tools For Android
  19. Termux Hacking Tools 2019
  20. Hacker Tools Apk Download
  21. Hacking Tools For Beginners
  22. Hacking Tools For Windows Free Download
  23. Hacker Tools For Windows
  24. Pentest Tools For Windows
  25. Pentest Recon Tools
  26. Hacker Search Tools
  27. Hack Rom Tools
  28. Hacking Tools Kit
  29. Hack Rom Tools
  30. Hacking Tools For Windows Free Download
  31. Hack Tools For Windows
  32. Pentest Tools Website
  33. Hacking Tools For Mac
  34. Hack Tools For Ubuntu
  35. How To Install Pentest Tools In Ubuntu
  36. Kik Hack Tools
  37. What Is Hacking Tools
  38. Hacking Tools 2019
  39. Best Pentesting Tools 2018
  40. Hacking Tools
  41. Hacker Hardware Tools
  42. Hacker Tools 2020
  43. Hacking Tools For Pc
  44. Pentest Tools Download
  45. Hack Tools For Windows
  46. Top Pentest Tools
  47. Pentest Tools Free
  48. Pentest Tools Open Source
  49. Hacking Tools For Kali Linux
  50. Hacking Tools Software
  51. Physical Pentest Tools
  52. Hacker
  53. Hack Tools
  54. Pentest Tools Download
  55. Hak5 Tools
  56. Hack Tools For Games
  57. Hack Apps
  58. Tools Used For Hacking
  59. Hacker Search Tools
  60. Pentest Tools Apk
  61. Hack Tools For Mac
  62. Wifi Hacker Tools For Windows
  63. Hacking Tools Name
  64. Termux Hacking Tools 2019
  65. Hacker Security Tools
  66. Hacker Tools For Ios
  67. Hacker Tools 2020
  68. Hacking Tools Usb
  69. Hack Tools Mac
  70. Pentest Box Tools Download
  71. Hacking Tools For Games
  72. Hack Tools For Pc
  73. Hacker Tools Apk Download
  74. Blackhat Hacker Tools
  75. Hacking Tools For Windows Free Download
  76. Game Hacking
  77. Hacking Tools Windows 10
  78. Hack Tools Download
  79. Hacking Tools For Windows
  80. Hack Tools For Games
  81. Hacker Tools For Windows
  82. Easy Hack Tools
  83. Hacking Apps
  84. Pentest Tools For Windows
  85. Hack Tools For Windows
  86. Nsa Hack Tools Download
  87. Pentest Tools Website Vulnerability
  88. Black Hat Hacker Tools
  89. Hacking Tools Software
  90. Hacking Tools For Kali Linux
  91. Pentest Tools List
  92. How To Install Pentest Tools In Ubuntu
  93. Bluetooth Hacking Tools Kali
  94. How To Install Pentest Tools In Ubuntu
  95. Pentest Recon Tools
  96. Ethical Hacker Tools
  97. Hack Tools For Pc
  98. Hacker Tools Free Download
  99. Hacking Tools 2019
  100. Hackrf Tools
  101. Hacker Tools For Pc
  102. Physical Pentest Tools
  103. Bluetooth Hacking Tools Kali
  104. Pentest Tools Find Subdomains
  105. Pentest Automation Tools
  106. Hacking Tools For Games
  107. Pentest Tools Website Vulnerability
  108. How To Install Pentest Tools In Ubuntu
  109. Pentest Tools For Ubuntu
  110. Hack Website Online Tool
  111. Hacking Tools And Software
  112. Hack Tools For Games
  113. Hacking Tools 2019
  114. Pentest Tools For Android
  115. Best Hacking Tools 2019
  116. Hack And Tools
  117. New Hacker Tools
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)