Support For XXE Attacks In SAML In Our Burp Suite Extension

In this post we present the new version of the Burp Suite extension EsPReSSO - Extension for Processing and Recognition of Single Sign-On Protocols. A DTD attacker was implemented on SAML services that was based on the DTD Cheat Sheet by the Chair for Network and Data Security (https://web-in-security.blogspot.de/2016/03/xxe-cheat-sheet.html). In addition, many fixes were added and a new SAML editor was merged. You can find the newest version release here: https://github.com/RUB-NDS/BurpSSOExtension/releases/tag/v3.1

New SAML editor

Before the new release, EsPReSSO had a simple SAML editor where the decoded SAML messages could be modified by the user. We extended the SAML editor so that the user has the possibility to define the encoding of the SAML message and to select their HTTP binding (HTTP-GET or HTTP-POST).

Redesigned SAML Encoder/Decoder

Enhancement of the SAML attacker

XML Signature Wrapping and XML Signature Faking attacks have already been part of the previous EsPReSSO version. Now the user can also perform DTD attacks! The user can select from 18 different attack vectors and manually refine them all before applying the change to the original message. Additional attack vectors can also be added by extending the XML config file of the DTD attacker.
The DTD attacker can also be started in a fully automated mode. This functionality is integrated in the BurpSuite Intruder.

DTD Attacker for SAML messages

Supporting further attacks

We implemented a CertificateViewer which extracts and decodes the certificates contained within the SAML tokens. In addition, a user interface for executing SignatureExclusion attack on SAML has been implemented.

Additional functions will follow in later versions.

Currently we are working on XML Encryption attacks.

This is a combined work from Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, and Vladislav Mladenov.

The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

More info

1. Hacking Apps
2. Pentest Tools Bluekeep
3. Pentest Recon Tools
4. Black Hat Hacker Tools
5. Hacking Tools Windows
6. Hacker Tools For Ios
7. Termux Hacking Tools 2019
8. Hacking Tools 2020
9. Github Hacking Tools
10. Pentest Tools Url Fuzzer
11. Hacking Tools 2019
12. Hacking Tools Kit
13. Hacking Tools For Windows 7
14. Pentest Recon Tools
15. Top Pentest Tools
16. Hack Tools
17. Hacking Tools Mac
18. Best Pentesting Tools 2018
19. Hack Tools Download
20. Hacking Tools For Games
21. Hacking Tools Windows
22. Hak5 Tools
23. Usb Pentest Tools
24. Pentest Tools Website Vulnerability
25. Hacking Tools For Kali Linux
26. Computer Hacker
27. Hacking Tools Free Download
28. Hacker Tools 2020
29. Hacker Tools Free
30. Pentest Tools Tcp Port Scanner
31. Hacking Tools Software
32. Game Hacking
33. Hack Tool Apk No Root
34. Hack Tools
35. Pentest Tools Windows
36. Pentest Tools Alternative
37. Hackrf Tools
38. Kik Hack Tools
39. Hak5 Tools
40. Ethical Hacker Tools
41. Top Pentest Tools
42. Pentest Tools Framework
43. Pentest Tools Url Fuzzer
44. Hack Tools For Mac
45. Hacker Tools Github
46. Pentest Tools For Ubuntu
47. Hacking Tools For Windows Free Download
48. Pentest Tools Find Subdomains
49. How To Install Pentest Tools In Ubuntu
50. Hacking App
51. Pentest Automation Tools
52. Hacker Tool Kit
53. Pentest Reporting Tools
54. Growth Hacker Tools
55. Pentest Tools Subdomain
56. Pentest Tools Url Fuzzer
57. Hacker Tools Apk
58. Pentest Box Tools Download
59. Hacking Tools Windows
60. Hacker Tools Software
61. Underground Hacker Sites
62. Hacker Tools 2020
63. Hack Tools For Windows
64. Nsa Hacker Tools
65. Kik Hack Tools
66. Pentest Tools Bluekeep
67. Hacker Tools Free
68. What Is Hacking Tools
69. Hack Tools Pc
70. Pentest Tools Tcp Port Scanner
71. Black Hat Hacker Tools
72. Hacker Tools Online
73. Computer Hacker
74. Hacker Techniques Tools And Incident Handling
75. New Hacker Tools
76. Hacking Tools Download
77. Hacker Tools For Pc
78. Hackrf Tools
79. Hacking Tools 2020
80. Hacking Tools For Kali Linux
81. Hacking Tools For Mac
82. Pentest Box Tools Download
83. Pentest Automation Tools
84. Nsa Hacker Tools
85. Hacking Tools For Beginners
86. Game Hacking
87. Hack Tools For Pc
88. Nsa Hack Tools Download
89. Pentest Tools Online
90. Pentest Tools For Android
91. Hackers Toolbox
92. Hacking Tools 2020
93. Pentest Tools
94. Pentest Tools For Android
95. Hacker Tools Windows
96. Hacking Tools Download
97. Hacking Tools Download
98. Black Hat Hacker Tools
99. Hacking Tools 2020
100. Pentest Tools Kali Linux
101. Pentest Tools For Ubuntu
102. Hacker Tools Windows
103. Hacker Tools For Mac
104. Hacking Tools Kit
105. Beginner Hacker Tools
106. Pentest Tools Review
107. Hack Tools Mac
108. Physical Pentest Tools
109. World No 1 Hacker Software
110. Pentest Tools Kali Linux
111. Hacker Tools Apk Download
112. Pentest Tools For Ubuntu
113. Hack Tools For Mac
114. Pentest Tools Review
115. Pentest Tools Bluekeep
116. Termux Hacking Tools 2019
117. Pentest Tools Website
118. Pentest Tools List
119. How To Hack
120. Hacking Tools Kit
121. Hacker Tools Github
122. Termux Hacking Tools 2019
123. Computer Hacker
124. Hacking Tools
125. Hack And Tools
126. Hacker Tools For Windows
127. How To Install Pentest Tools In Ubuntu
128. Termux Hacking Tools 2019
129. Hacker Security Tools
130. Pentest Tools Apk
131. Nsa Hack Tools Download
132. Bluetooth Hacking Tools Kali
133. Hackers Toolbox
134. Hacker Tools Apk
135. Hacking Tools And Software
136. Hack Tools Online
137. Pentest Tools Framework
138. How To Make Hacking Tools
139. Blackhat Hacker Tools
140. World No 1 Hacker Software
141. Easy Hack Tools
142. Pentest Tools
143. Hacking Tools For Pc
144. Hacker Tools Free
145. Hacking Tools
146. Hacker Tool Kit
147. New Hacker Tools
148. Hacking Tools For Windows
149. Blackhat Hacker Tools
150. Hack Tools For Mac
151. Pentest Tools Android
152. Nsa Hack Tools