Support For XXE Attacks In SAML In Our Burp Suite Extension

In this post we present the new version of the Burp Suite extension EsPReSSO - Extension for Processing and Recognition of Single Sign-On Protocols. A DTD attacker was implemented on SAML services that was based on the DTD Cheat Sheet by the Chair for Network and Data Security (https://web-in-security.blogspot.de/2016/03/xxe-cheat-sheet.html). In addition, many fixes were added and a new SAML editor was merged. You can find the newest version release here: https://github.com/RUB-NDS/BurpSSOExtension/releases/tag/v3.1

New SAML editor

Before the new release, EsPReSSO had a simple SAML editor where the decoded SAML messages could be modified by the user. We extended the SAML editor so that the user has the possibility to define the encoding of the SAML message and to select their HTTP binding (HTTP-GET or HTTP-POST).

Redesigned SAML Encoder/Decoder

Enhancement of the SAML attacker

XML Signature Wrapping and XML Signature Faking attacks have already been part of the previous EsPReSSO version. Now the user can also perform DTD attacks! The user can select from 18 different attack vectors and manually refine them all before applying the change to the original message. Additional attack vectors can also be added by extending the XML config file of the DTD attacker.
The DTD attacker can also be started in a fully automated mode. This functionality is integrated in the BurpSuite Intruder.

DTD Attacker for SAML messages

Supporting further attacks

We implemented a CertificateViewer which extracts and decodes the certificates contained within the SAML tokens. In addition, a user interface for executing SignatureExclusion attack on SAML has been implemented.

Additional functions will follow in later versions.

Currently we are working on XML Encryption attacks.

This is a combined work from Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, and Vladislav Mladenov.

The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

Related posts

1. Pentest Tools Port Scanner
2. Hacker Tools Free
3. Hacking Tools For Windows
4. Pentest Tools For Mac
5. Hack Tools For Ubuntu
6. Hacking Tools Software
7. Hacking App
8. Pentest Tools Review
9. Underground Hacker Sites
10. Hacker Search Tools
11. Hacks And Tools
12. Pentest Tools Windows
13. Ethical Hacker Tools
14. Install Pentest Tools Ubuntu
15. Hacker Search Tools
16. Pentest Tools For Mac
17. Pentest Tools Bluekeep
18. Hacker Tools Apk Download
19. Pentest Tools Android
20. How To Hack
21. Hacker Tools Windows
22. Hack Rom Tools
23. Ethical Hacker Tools
24. Tools 4 Hack
25. Hacker Tools 2019
26. Hack Tools Download
27. Hacker Tools 2019
28. Game Hacking
29. Tools For Hacker
30. Hacking Tools 2020
31. Tools 4 Hack
32. Hack Tools Download
33. Hacker Techniques Tools And Incident Handling
34. Usb Pentest Tools
35. Hack Tools Mac
36. Top Pentest Tools
37. Hacking Tools For Mac
38. Hacking Tools Kit
39. Hacker Tools List
40. Pentest Automation Tools
41. Pentest Tools Website Vulnerability
42. Hacker Tools 2019
43. Hacking Apps
44. Pentest Tools Github
45. Hack Tools 2019
46. Top Pentest Tools
47. Hack Tools Pc
48. Hacking Tools For Beginners
49. Hacking Tools Name
50. Hacks And Tools
51. Android Hack Tools Github
52. Hacker Security Tools
53. Pentest Tools For Android
54. Hacker
55. Pentest Tools Windows
56. Hacking Tools Download
57. Hacking Tools 2019
58. Hack Tool Apk No Root
59. Hack Tools For Mac
60. Pentest Tools Url Fuzzer
61. Hacking Tools For Mac
62. Hacking Tools Github
63. Nsa Hack Tools Download
64. Pentest Tools Find Subdomains
65. Pentest Tools Github
66. Hack Rom Tools
67. Pentest Tools
68. Hackers Toolbox
69. Pentest Tools Nmap
70. Hacking Tools For Pc
71. Pentest Tools Kali Linux
72. Game Hacking
73. Pentest Tools Website Vulnerability
74. Hack Tools Online
75. What Is Hacking Tools
76. Hacking App
77. Hacker Tools Linux
78. Hacker Search Tools
79. Hack Tools Github
80. Underground Hacker Sites
81. Hacking Tools Kit
82. Hacker Tools Apk
83. Pentest Tools Windows
84. Hacker
85. Pentest Tools Apk
86. Hack Tools
87. Hacking Tools For Beginners
88. Nsa Hack Tools
89. Hacking Tools For Beginners
90. Hack Tools
91. Hacker Tools 2020
92. Hacking Tools For Beginners
93. Hacking Tools For Mac
94. Wifi Hacker Tools For Windows
95. Hacking App
96. Hacker Tools
97. Black Hat Hacker Tools