Authentication / Authorization Badge

173 Completed

50 Videos

25 Exercises

The Authentication/Authorization Badge covers vulnerabilities in authentication and authorisation. It focuses on SAML and Oauth.

Exercises

Easy

PENTESTERLAB

SAML: Introduction

This exercise covers the exploitation of a signature stripping vulnerability in SAML
3 videos
Completed by 2816 students
Takes < 1 Hr. on average
RoR

Easy

PENTESTERLAB

OAuth2: Authorization Server CSRF

This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server
2 videos
Completed by 1108 students
Takes 1-2 Hrs. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

SAML: Signature Stripping

This exercise covers the exploitation of a signature stripping vulnerability in SAML
3 videos
Completed by 1991 students
Takes < 1 Hr. on average
RoR

Medium

PENTESTERLAB

SAML: Comment Injection

This exercise covers the exploitation of a comment injection vulnerability in SAML
2 videos
Completed by 1603 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: PySAML2 SSRF

This exercise covers the exploitation of a SSRF in PySAML2
Completed by 174 students
Takes < 1 Hr. on average
Python

Medium

PENTESTERLAB

SAML: CVE-2021-21239

This exercise covers the exploitation of CVE-2021-21239 (PySAML2)
2 videos
Completed by 95 students
Takes 2-4 Hrs. on average
Python

Medium

PENTESTERLAB

SAML: Malicious IDP

This exercise covers the creation of a malicious IDP to forge an assertion
Completed by 49 students
Takes 2-4 Hrs. on average
Ruby-on-Rails

Medium

PENTESTERLAB

SAML: Signature Wrapping III

This exercise covers the exploitation of a Signature Wrapping Issue in passport-saml (CVE-2022-39299)
2 videos
Completed by 136 students
Takes 1-2 Hrs. on average
Node

Medium

PENTESTERLAB

OAuth2: Authorization Server XSS

This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
2 videos
Completed by 361 students
Takes < 1 Hr. on average
Ruby-On-Rails

Medium

PENTESTERLAB

SAML: Comment Injection II

This exercise covers the exploitation of a comment injection vulnerability in SAML
3 videos
Completed by 586 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

OAuth2: State Fixation

This exercise covers the exploitation of a state fixation in an OAuth2 Client
2 videos
Completed by 391 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Medium

PENTESTERLAB

SAML: SAMLResponse forwarding

This exercise covers how to pass the SAMLResponse from one Service Provider to another
1 video
Completed by 486 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: Trusted Embedded Key

This exercise covers the exploitation of a Service Provider (SP) that doesn't check the certificate provided in the SAMLResponse
2 videos
Completed by 496 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: Known Key

This exercise covers the exploitation of a known key in SAML
3 videos
Completed by 517 students
Takes 1-2 Hrs. on average
Ruby on Rails

Medium

PENTESTERLAB

OAuth2: Client CSRF II

This exercise covers the exploitation of a CSRF in an OAuth2 Client
2 videos
Completed by 477 students
Takes 2-4 Hrs. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

OAuth2: Client CSRF

This exercise covers the exploitation of a CSRF in an OAuth2 Client
2 videos
Completed by 930 students
Takes < 1 Hr. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

OAuth2: Client OpenRedirect

This exercise covers the exploitation of an OpenRedirect in an OAuth2 Client
2 videos
Completed by 811 students
Takes < 1 Hr. on average
Ruby-On-Rails

Medium

PENTESTERLAB

OAuth2: Authorization Server OpenRedirect

This exercise covers the exploitation of an OpenRedirect in an OAuth2 Authorization Server
3 videos
Completed by 924 students
Takes < 1 Hr. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Predictable State

This exercise covers the exploitation of a predictable state in an OAuth2 Client
2 videos
Completed by 281 students
Takes 2-4 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Predictable State II

This exercise covers the exploitation of a predictable state in an OAuth2 Client
2 videos
Completed by 260 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

SAML: Signature Wrapping

This exercise covers how to use Signature Wrapping to become an arbitrary user
2 videos
Completed by 538 students
Takes < 1 Hr. on average
Ruby on Rails

Hard

PENTESTERLAB

SAML: Signature Wrapping II

This exercise covers how to use Signature Wrapping to become an arbitrary user
2 videos
Completed by 441 students
Takes < 1 Hr. on average
Ruby on Rails

Hard

PENTESTERLAB

OAuth2: Client Server XSS

This exercise covers the exploitation of a Cross-Site Scripting in an OAuth2 Client and Server
2 videos
Completed by 358 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Authorization Server XSS II

This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
2 videos
Completed by 262 students
Takes < 1 Hr. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Github HTTP HEAD

This exercise covers the exploitation of the HTTP HEAD issue impacting Github in 2019
2 videos
Completed by 447 students
Takes < 1 Hr. on average
Ruby-On-Rails