Authentication / Authorization Badge

176 Completed

50 Videos

25 Exercises

The Authentication/Authorization Badge covers vulnerabilities in authentication and authorisation. It focuses on SAML and Oauth.

Exercises

Easy

PENTESTERLAB

SAML: Introduction

This exercise covers the exploitation of a signature stripping vulnerability in SAML
3 videos
Completed by 2841 students
Takes < 1 Hr. on average
RoR

Easy

PENTESTERLAB

OAuth2: Authorization Server CSRF

This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server
2 videos
Completed by 1115 students
Takes 1-2 Hrs. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

SAML: Signature Stripping

This exercise covers the exploitation of a signature stripping vulnerability in SAML
3 videos
Completed by 2013 students
Takes < 1 Hr. on average
RoR

Medium

PENTESTERLAB

SAML: Comment Injection

This exercise covers the exploitation of a comment injection vulnerability in SAML
2 videos
Completed by 1624 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: PySAML2 SSRF

This exercise covers the exploitation of a SSRF in PySAML2
Completed by 192 students
Takes < 1 Hr. on average
Python

Medium

PENTESTERLAB

SAML: CVE-2021-21239

This exercise covers the exploitation of CVE-2021-21239 (PySAML2)
2 videos
Completed by 100 students
Takes 1-2 Hrs. on average
Python

Medium

PENTESTERLAB

SAML: Malicious IDP

This exercise covers the creation of a malicious IDP to forge an assertion
Completed by 53 students
Takes 2-4 Hrs. on average
Ruby-on-Rails

Medium

PENTESTERLAB

SAML: Signature Wrapping III

This exercise covers the exploitation of a Signature Wrapping Issue in passport-saml (CVE-2022-39299)
2 videos
Completed by 143 students
Takes 1-2 Hrs. on average
Node

Medium

PENTESTERLAB

OAuth2: Authorization Server XSS

This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
2 videos
Completed by 366 students
Takes < 1 Hr. on average
Ruby-On-Rails

Medium

PENTESTERLAB

SAML: Comment Injection II

This exercise covers the exploitation of a comment injection vulnerability in SAML
3 videos
Completed by 596 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

OAuth2: State Fixation

This exercise covers the exploitation of a state fixation in an OAuth2 Client
2 videos
Completed by 398 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Medium

PENTESTERLAB

SAML: SAMLResponse forwarding

This exercise covers how to pass the SAMLResponse from one Service Provider to another
1 video
Completed by 493 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: Trusted Embedded Key

This exercise covers the exploitation of a Service Provider (SP) that doesn't check the certificate provided in the SAMLResponse
2 videos
Completed by 501 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: Known Key

This exercise covers the exploitation of a known key in SAML
3 videos
Completed by 523 students
Takes 1-2 Hrs. on average
Ruby on Rails

Medium

PENTESTERLAB

OAuth2: Client CSRF II

This exercise covers the exploitation of a CSRF in an OAuth2 Client
2 videos
Completed by 484 students
Takes 2-4 Hrs. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

OAuth2: Client CSRF

This exercise covers the exploitation of a CSRF in an OAuth2 Client
2 videos
Completed by 937 students
Takes < 1 Hr. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

OAuth2: Client OpenRedirect

This exercise covers the exploitation of an OpenRedirect in an OAuth2 Client
2 videos
Completed by 818 students
Takes < 1 Hr. on average
Ruby-On-Rails

Medium

PENTESTERLAB

OAuth2: Authorization Server OpenRedirect

This exercise covers the exploitation of an OpenRedirect in an OAuth2 Authorization Server
3 videos
Completed by 932 students
Takes < 1 Hr. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Predictable State

This exercise covers the exploitation of a predictable state in an OAuth2 Client
2 videos
Completed by 288 students
Takes 2-4 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Predictable State II

This exercise covers the exploitation of a predictable state in an OAuth2 Client
2 videos
Completed by 267 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

SAML: Signature Wrapping

This exercise covers how to use Signature Wrapping to become an arbitrary user
2 videos
Completed by 550 students
Takes < 1 Hr. on average
Ruby on Rails

Hard

PENTESTERLAB

SAML: Signature Wrapping II

This exercise covers how to use Signature Wrapping to become an arbitrary user
2 videos
Completed by 452 students
Takes < 1 Hr. on average
Ruby on Rails

Hard

PENTESTERLAB

OAuth2: Client Server XSS

This exercise covers the exploitation of a Cross-Site Scripting in an OAuth2 Client and Server
2 videos
Completed by 362 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Authorization Server XSS II

This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
2 videos
Completed by 268 students
Takes < 1 Hr. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Github HTTP HEAD

This exercise covers the exploitation of the HTTP HEAD issue impacting Github in 2019
2 videos
Completed by 454 students
Takes < 1 Hr. on average
Ruby-On-Rails