Support For XXE Attacks In SAML In Our Burp Suite Extension

In this post we present the new version of the Burp Suite extension EsPReSSO - Extension for Processing and Recognition of Single Sign-On Protocols. A DTD attacker was implemented on SAML services that was based on the DTD Cheat Sheet by the Chair for Network and Data Security (https://web-in-security.blogspot.de/2016/03/xxe-cheat-sheet.html). In addition, many fixes were added and a new SAML editor was merged. You can find the newest version release here: https://github.com/RUB-NDS/BurpSSOExtension/releases/tag/v3.1

New SAML editor

Before the new release, EsPReSSO had a simple SAML editor where the decoded SAML messages could be modified by the user. We extended the SAML editor so that the user has the possibility to define the encoding of the SAML message and to select their HTTP binding (HTTP-GET or HTTP-POST).

Redesigned SAML Encoder/Decoder

Enhancement of the SAML attacker

XML Signature Wrapping and XML Signature Faking attacks have already been part of the previous EsPReSSO version. Now the user can also perform DTD attacks! The user can select from 18 different attack vectors and manually refine them all before applying the change to the original message. Additional attack vectors can also be added by extending the XML config file of the DTD attacker.
The DTD attacker can also be started in a fully automated mode. This functionality is integrated in the BurpSuite Intruder.

DTD Attacker for SAML messages

Supporting further attacks

We implemented a CertificateViewer which extracts and decodes the certificates contained within the SAML tokens. In addition, a user interface for executing SignatureExclusion attack on SAML has been implemented.

Additional functions will follow in later versions.

Currently we are working on XML Encryption attacks.

This is a combined work from Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, and Vladislav Mladenov.

The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

More articles

1. Hacking Tools Software
2. What Is Hacking Tools
3. Physical Pentest Tools
4. Wifi Hacker Tools For Windows
5. Hacker Tool Kit
6. How To Hack
7. Pentest Tools Github
8. Beginner Hacker Tools
9. Hacker Tools Hardware
10. Pentest Tools Website
11. Hacker Tools Free Download
12. Hack Tools Mac
13. Pentest Tools
14. Pentest Tools For Mac
15. Hacker Tool Kit
16. Hacker Tools Apk Download
17. Hack Tools Mac
18. Hacker Tools Windows
19. Nsa Hack Tools
20. How To Install Pentest Tools In Ubuntu
21. Hacker Techniques Tools And Incident Handling
22. Pentest Tools Free
23. Pentest Tools Website Vulnerability
24. Hacker Tools 2020
25. Hack Tools Github
26. Hacking Tools Usb
27. Black Hat Hacker Tools
28. How To Make Hacking Tools
29. Hack Tools For Windows
30. Pentest Tools Free
31. Hacking Tools Software
32. Github Hacking Tools
33. Blackhat Hacker Tools
34. Hacking Tools For Windows
35. Hack Tools For Windows
36. Hacker Tools For Mac
37. Hacker Tools Apk Download
38. Pentest Tools Review
39. Hacking Tools
40. Hacking Tools For Windows 7
41. Hack Tools Mac
42. Hack Tools Pc
43. Pentest Tools For Ubuntu
44. Hacking Tools
45. Hacker Tools List
46. Pentest Tools Url Fuzzer
47. Physical Pentest Tools
48. Pentest Tools Subdomain
49. Hack Tools Online
50. Hacking Tools Software
51. Pentest Automation Tools
52. Hacker Security Tools
53. Hacking Tools For Windows Free Download
54. Github Hacking Tools
55. Growth Hacker Tools
56. Hacking Tools Free Download
57. Hacker Security Tools
58. Pentest Tools Subdomain
59. Hacking Tools Github
60. Pentest Tools Website Vulnerability
61. Hacking Tools 2020
62. Hack Tools For Ubuntu
63. Hacking Tools For Mac
64. Hacker Tools Linux
65. Github Hacking Tools
66. Tools Used For Hacking
67. Hacker Tools For Ios
68. Hack Tools For Pc
69. Pentest Tools Subdomain
70. Hacker Tools Hardware
71. Hack Tools For Mac
72. World No 1 Hacker Software
73. Hacking Tools For Mac
74. What Are Hacking Tools
75. Pentest Tools Website Vulnerability
76. Termux Hacking Tools 2019
77. Hacking Tools Windows 10
78. Hacking Tools For Beginners
79. World No 1 Hacker Software
80. Hacking Tools Online
81. Hacker Tools Free Download
82. Hacking Tools Mac
83. Blackhat Hacker Tools
84. Hack And Tools
85. Hacker Tools 2019
86. Hacker Tools Apk Download
87. Hack Tools Online
88. Hack Tools Download
89. Pentest Tools Framework
90. Hacking Tools Download
91. Hacker Search Tools
92. Ethical Hacker Tools
93. Hack Tool Apk No Root
94. Hacking Tools Mac