Support For XXE Attacks In SAML In Our Burp Suite Extension

In this post we present the new version of the Burp Suite extension EsPReSSO - Extension for Processing and Recognition of Single Sign-On Protocols. A DTD attacker was implemented on SAML services that was based on the DTD Cheat Sheet by the Chair for Network and Data Security (https://web-in-security.blogspot.de/2016/03/xxe-cheat-sheet.html). In addition, many fixes were added and a new SAML editor was merged. You can find the newest version release here: https://github.com/RUB-NDS/BurpSSOExtension/releases/tag/v3.1

New SAML editor

Before the new release, EsPReSSO had a simple SAML editor where the decoded SAML messages could be modified by the user. We extended the SAML editor so that the user has the possibility to define the encoding of the SAML message and to select their HTTP binding (HTTP-GET or HTTP-POST).

Redesigned SAML Encoder/Decoder

Enhancement of the SAML attacker

XML Signature Wrapping and XML Signature Faking attacks have already been part of the previous EsPReSSO version. Now the user can also perform DTD attacks! The user can select from 18 different attack vectors and manually refine them all before applying the change to the original message. Additional attack vectors can also be added by extending the XML config file of the DTD attacker.
The DTD attacker can also be started in a fully automated mode. This functionality is integrated in the BurpSuite Intruder.

DTD Attacker for SAML messages

Supporting further attacks

We implemented a CertificateViewer which extracts and decodes the certificates contained within the SAML tokens. In addition, a user interface for executing SignatureExclusion attack on SAML has been implemented.

Additional functions will follow in later versions.

Currently we are working on XML Encryption attacks.

This is a combined work from Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, and Vladislav Mladenov.

The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

Related articles

1. Hacking Tools For Windows
2. Hacker Tools Free Download
3. Beginner Hacker Tools
4. Termux Hacking Tools 2019
5. Hacker Tools Mac
6. Hacker Tools For Mac
7. Hacker Tools Apk Download
8. Hacking Tools For Windows
9. Hack Tools Pc
10. Hacking Tools Download
11. Hacking Tools Windows
12. Pentest Recon Tools
13. Pentest Tools Port Scanner
14. Hacking Tools Mac
15. Pentest Tools Kali Linux
16. Hacking Tools And Software
17. How To Install Pentest Tools In Ubuntu
18. Hacking Tools Github
19. Pentest Tools Find Subdomains
20. Nsa Hacker Tools
21. Pentest Tools Android
22. Usb Pentest Tools
23. Hacking Tools For Beginners
24. Pentest Tools List
25. Hack Tools Online
26. Free Pentest Tools For Windows
27. Hacker Tools Apk Download
28. Github Hacking Tools
29. Github Hacking Tools
30. How To Install Pentest Tools In Ubuntu
31. Hack Tools For Games
32. Hacking Tools Free Download
33. Pentest Automation Tools
34. Hacking Tools Pc
35. Hack Tools
36. Hack Tool Apk No Root
37. Hacker Tools Hardware
38. How To Make Hacking Tools
39. Hacker Tools Apk Download
40. Pentest Automation Tools
41. Hack Tool Apk
42. Pentest Tools Subdomain
43. Pentest Tools Apk
44. Hack Tools For Games
45. Hackrf Tools
46. New Hacker Tools
47. Hacker Tools 2020
48. Hacker Tools Free
49. Pentest Tools Online
50. Pentest Tools Subdomain
51. Pentest Tools Github
52. Kik Hack Tools
53. Pentest Tools Download
54. New Hack Tools
55. Hack Tools 2019
56. How To Make Hacking Tools
57. Pentest Tools Bluekeep
58. Nsa Hack Tools
59. Kik Hack Tools
60. Hacker Tools Apk Download
61. Hacker Tools For Ios
62. Pentest Tools Find Subdomains
63. Hack Apps
64. Hack Tools For Games
65. Pentest Tools Review
66. Usb Pentest Tools
67. Pentest Tools Kali Linux
68. Bluetooth Hacking Tools Kali
69. Pentest Tools Download
70. Black Hat Hacker Tools
71. Top Pentest Tools
72. Pentest Tools
73. Hack Tools Download
74. Pentest Tools Windows
75. Android Hack Tools Github
76. New Hack Tools
77. Hack Tools For Ubuntu
78. Tools For Hacker
79. Android Hack Tools Github
80. Best Hacking Tools 2019
81. Hack Tools
82. Hacker Tools Free
83. Underground Hacker Sites
84. Wifi Hacker Tools For Windows
85. Hacking Tools Online
86. What Are Hacking Tools
87. Pentest Tools For Android
88. Ethical Hacker Tools
89. Hack Tools For Pc
90. Pentest Tools Download
91. Pentest Tools Find Subdomains
92. Hack Tools Github
93. Hacker Tools Free Download
94. Hack Tools For Pc
95. Hack Tools For Mac
96. Top Pentest Tools
97. Hacking Tools Mac
98. Hacker Tools For Mac
99. Hack Tools For Pc
100. Hacking Tools For Games
101. Hackrf Tools
102. Physical Pentest Tools
103. Hacking Tools Download