Authentication / Authorization Badge

users completed icon
169 Completed
video icon
50 Videos
book icon
25 Exercises

The Authentication/Authorization Badge covers vulnerabilities in authentication and authorisation. If focuses on SAML and Oauth.

Exercises

Easy
auth badge icon
SAML: Introduction
  • This exercise covers the exploitation of a signature stripping vulnerability in SAML
  • 3 videos
  • Completed by 2782 students
  • Takes < 1 Hr. on average
  • RoR

 

Easy
auth badge icon
OAuth2: Authorization Server CSRF
  • This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server
  • 2 videos
  • Completed by 1087 students
  • Takes 1-2 Hrs. on average
  • Ruby-On-Rails
  • CWE-352

 

Medium
auth badge icon
SAML: Signature Stripping
  • This exercise covers the exploitation of a signature stripping vulnerability in SAML
  • 3 videos
  • Completed by 1964 students
  • Takes < 1 Hr. on average
  • RoR

 

Medium
auth badge icon
SAML: Comment Injection
  • This exercise covers the exploitation of a comment injection vulnerability in SAML
  • 2 videos
  • Completed by 1577 students
  • Takes < 1 Hr. on average
  • Ruby on Rails

 

Medium
auth badge icon
SAML: PySAML2 SSRF
  • This exercise covers the exploitation of a SSRF in PySAML2
  • Completed by 154 students
  • Takes < 1 Hr. on average
  • Python

 

Medium
auth badge icon
SAML: CVE-2021-21239
  • This exercise covers the exploitation of CVE-2021-21239 (PySAML2)
  • 2 videos
  • Completed by 86 students
  • Takes 2-4 Hrs. on average
  • Python

 

Medium
auth badge icon
SAML: Malicious IDP
  • This exercise covers the creation of a malicious IDP to forge an assertion
  • Completed by 43 students
  • Takes 2-4 Hrs. on average
  • Ruby-on-Rails

 

Medium
auth badge icon
SAML: Signature Wrapping III
  • This exercise covers the exploitation of a Signature Wrapping Issue in passport-saml (CVE-2022-39299)
  • 2 videos
  • Completed by 122 students
  • Takes 1-2 Hrs. on average
  • Node

 

Medium
auth badge icon
OAuth2: Authorization Server XSS
  • This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
  • 2 videos
  • Completed by 348 students
  • Takes < 1 Hr. on average
  • Ruby-On-Rails

 

Medium
auth badge icon
SAML: Comment Injection II
  • This exercise covers the exploitation of a comment injection vulnerability in SAML
  • 3 videos
  • Completed by 574 students
  • Takes < 1 Hr. on average
  • Ruby on Rails

 

Medium
auth badge icon
OAuth2: State Fixation
  • This exercise covers the exploitation of a state fixation in an OAuth2 Client
  • 2 videos
  • Completed by 380 students
  • Takes 1-2 Hrs. on average
  • Ruby-On-Rails

 

Medium
auth badge icon
SAML: SAMLResponse forwarding
  • This exercise covers how to pass the SAMLResponse from one Service Provider to another
  • 1 video
  • Completed by 474 students
  • Takes < 1 Hr. on average
  • Ruby on Rails

 

Medium
auth badge icon
SAML: Trusted Embedded Key
  • This exercise covers the exploitation of a Service Provider (SP) that doesn't check the certificate provided in the SAMLResponse
  • 2 videos
  • Completed by 486 students
  • Takes < 1 Hr. on average
  • Ruby on Rails

 

Medium
auth badge icon
SAML: Known Key
  • This exercise covers the exploitation of a known key in SAML
  • 3 videos
  • Completed by 510 students
  • Takes 1-2 Hrs. on average
  • Ruby on Rails

 

Medium
auth badge icon
OAuth2: Client CSRF II
  • This exercise covers the exploitation of a CSRF in an OAuth2 Client
  • 2 videos
  • Completed by 469 students
  • Takes 2-4 Hrs. on average
  • Ruby-On-Rails
  • CWE-352

 

Medium
auth badge icon
OAuth2: Client CSRF
  • This exercise covers the exploitation of a CSRF in an OAuth2 Client
  • 2 videos
  • Completed by 921 students
  • Takes < 1 Hr. on average
  • Ruby-On-Rails
  • CWE-352

 

Medium
auth badge icon
OAuth2: Client OpenRedirect
  • This exercise covers the exploitation of an OpenRedirect in an OAuth2 Client
  • 2 videos
  • Completed by 801 students
  • Takes < 1 Hr. on average
  • Ruby-On-Rails

 

Medium
auth badge icon
OAuth2: Authorization Server OpenRedirect
  • This exercise covers the exploitation of an OpenRedirect in an OAuth2 Authorization Server
  • 3 videos
  • Completed by 912 students
  • Takes < 1 Hr. on average
  • Ruby-On-Rails

 

Hard
auth badge icon
OAuth2: Predictable State
  • This exercise covers the exploitation of a predictable state in an OAuth2 Client
  • 2 videos
  • Completed by 274 students
  • Takes 2-4 Hrs. on average
  • Ruby-On-Rails

 

Hard
auth badge icon
OAuth2: Predictable State II
  • This exercise covers the exploitation of a predictable state in an OAuth2 Client
  • 2 videos
  • Completed by 254 students
  • Takes 1-2 Hrs. on average
  • Ruby-On-Rails

 

Hard
auth badge icon
SAML: Signature Wrapping
  • This exercise covers how to use Signature Wrapping to become an arbitrary user
  • 2 videos
  • Completed by 528 students
  • Takes < 1 Hr. on average
  • Ruby on Rails

 

Hard
auth badge icon
SAML: Signature Wrapping II
  • This exercise covers how to use Signature Wrapping to become an arbitrary user
  • 2 videos
  • Completed by 432 students
  • Takes < 1 Hr. on average
  • Ruby on Rails

 

Hard
auth badge icon
OAuth2: Client Server XSS
  • This exercise covers the exploitation of a Cross-Site Scripting in an OAuth2 Client and Server
  • 2 videos
  • Completed by 351 students
  • Takes 1-2 Hrs. on average
  • Ruby-On-Rails

 

Hard
auth badge icon
OAuth2: Authorization Server XSS II
  • This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
  • 2 videos
  • Completed by 255 students
  • Takes < 1 Hr. on average
  • Ruby-On-Rails

 

Hard
auth badge icon
OAuth2: Github HTTP HEAD
  • This exercise covers the exploitation of the HTTP HEAD issue impacting Github in 2019
  • 2 videos
  • Completed by 439 students
  • Takes < 1 Hr. on average
  • Ruby-On-Rails