Authentication / Authorization Badge

The Authentication/Authorization Badge covers vulnerabilities in authentication and authorisation. If focuses on SAML and Oauth.

Exercises

Completed this badge

CPEs

This exercise covers the exploitation of a CSRF in the Authorization server

Difficulty: EASY

This exercise covers the exploitation of a signature stripping vulnerability in SAML

Difficulty: EASY

This exercise covers the exploitation of a signature stripping vulnerability in SAML

Difficulty: EASY

This exercise covers the exploitation of a CSRF in the OAuth2 Client

Difficulty: MEDIUM

This exercise covers the exploitation of a CSRF in the OAuth2 Client

Difficulty: MEDIUM

This exercise explains how you can gain code execution on a system that relies on a vulnerable version of Spring's Oauth

Difficulty: MEDIUM

This exercise covers the exploitation of an OpenRedirect in the Authorization Server

Difficulty: MEDIUM

This exercise covers the exploitation of an OpenRedirect in the OAuth2 Client

Difficulty: MEDIUM

This exercise covers the exploitation of the HTTP HEAD issue impacting Github in 2019

Difficulty: HARD