Support For XXE Attacks In SAML In Our Burp Suite Extension

In this post we present the new version of the Burp Suite extension EsPReSSO - Extension for Processing and Recognition of Single Sign-On Protocols. A DTD attacker was implemented on SAML services that was based on the DTD Cheat Sheet by the Chair for Network and Data Security (https://web-in-security.blogspot.de/2016/03/xxe-cheat-sheet.html). In addition, many fixes were added and a new SAML editor was merged. You can find the newest version release here: https://github.com/RUB-NDS/BurpSSOExtension/releases/tag/v3.1

New SAML editor

Before the new release, EsPReSSO had a simple SAML editor where the decoded SAML messages could be modified by the user. We extended the SAML editor so that the user has the possibility to define the encoding of the SAML message and to select their HTTP binding (HTTP-GET or HTTP-POST).

Redesigned SAML Encoder/Decoder

Enhancement of the SAML attacker

XML Signature Wrapping and XML Signature Faking attacks have already been part of the previous EsPReSSO version. Now the user can also perform DTD attacks! The user can select from 18 different attack vectors and manually refine them all before applying the change to the original message. Additional attack vectors can also be added by extending the XML config file of the DTD attacker.
The DTD attacker can also be started in a fully automated mode. This functionality is integrated in the BurpSuite Intruder.

DTD Attacker for SAML messages

Supporting further attacks

We implemented a CertificateViewer which extracts and decodes the certificates contained within the SAML tokens. In addition, a user interface for executing SignatureExclusion attack on SAML has been implemented.

Additional functions will follow in later versions.

Currently we are working on XML Encryption attacks.

This is a combined work from Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, and Vladislav Mladenov.

The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

More info

1. Hacker Tools Mac
2. Hacking Tools For Beginners
3. Hacker Tools
4. Pentest Tools Bluekeep
5. Hack Tool Apk No Root
6. Hack Rom Tools
7. Pentest Tools For Windows
8. Hacker Tools Windows
9. Hack Tools 2019
10. Hacker Tools For Ios
11. Hacking Tools For Beginners
12. Hack Tools For Ubuntu
13. Hacker Tools Apk Download
14. Hacker Tools 2019
15. Physical Pentest Tools
16. Termux Hacking Tools 2019
17. Hack Tool Apk No Root
18. Hacking Tools Hardware
19. Hacker Tools For Mac
20. Hacker Techniques Tools And Incident Handling
21. Hacking Tools For Windows Free Download
22. Hacking Tools For Windows Free Download
23. Pentest Tools Nmap
24. Computer Hacker
25. Hacker Tools Free
26. Easy Hack Tools
27. Nsa Hacker Tools
28. Hackrf Tools
29. Black Hat Hacker Tools
30. Hacker Hardware Tools
31. Hack Tools For Pc
32. Hack Tools 2019
33. Pentest Tools Free
34. Easy Hack Tools
35. Hacking Tools 2020
36. Termux Hacking Tools 2019
37. Hacker Search Tools
38. Pentest Tools For Windows
39. Pentest Tools For Ubuntu
40. Hack Rom Tools
41. Pentest Tools Alternative
42. Pentest Tools Kali Linux
43. Physical Pentest Tools
44. Pentest Recon Tools
45. Pentest Tools Android
46. Hacking Tools Software
47. Blackhat Hacker Tools
48. Hacker Tools Online
49. Hacker Tools Software
50. Hacker Tools Apk Download
51. Pentest Tools List
52. Pentest Recon Tools
53. Pentest Tools Find Subdomains
54. Hacking Tools For Kali Linux
55. Pentest Tools For Android
56. Hacker Tools For Mac
57. Hacker Tools List
58. Nsa Hack Tools Download
59. Hack Tools Online
60. Pentest Tools Port Scanner
61. Hacking Tools Windows 10
62. Hacking Tools For Windows
63. Hacking Tools For Kali Linux
64. Best Hacking Tools 2020
65. Pentest Tools Subdomain
66. Pentest Tools Find Subdomains
67. Free Pentest Tools For Windows
68. Hacker Search Tools
69. Pentest Tools Alternative
70. Hack Rom Tools
71. Hacking Tools And Software
72. Pentest Tools Subdomain
73. Hack Tools
74. Hacker Tools For Mac
75. Hack App
76. Easy Hack Tools
77. Hacker Tools For Windows
78. Hacker Tools 2019
79. Hacking Tools For Mac
80. Pentest Tools Github
81. Beginner Hacker Tools
82. Android Hack Tools Github
83. Tools 4 Hack
84. New Hack Tools
85. Hacker Hardware Tools
86. Hack Tools Pc
87. How To Hack
88. Hacker Tools Apk
89. Pentest Tools For Android
90. Pentest Tools Url Fuzzer
91. Best Hacking Tools 2019
92. Pentest Tools Online
93. Hacking Tools Pc
94. Hacking Tools For Games

Tweet

Postingan terkait:

Ditulis ceo.rss — Minggu, 30 Agustus 2020 — Add Comment