Authentication / Authorization Badge

The Authentication/Authorization Badge covers vulnerabilities in authentication and authorisation. It focuses on SAML and Oauth.

25 exercises 192 completed 50 videos

Exercises

Easy

PENTESTERLAB

SAML: Introduction

This exercise covers the exploitation of a signature stripping vulnerability in SAML
3 videos
Completed by 3013 students
Takes < 1 Hr. on average
RoR

Easy

PENTESTERLAB

OAuth2: Authorization Server CSRF

This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server
2 videos
Completed by 1178 students
Takes 1-2 Hrs. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

SAML: Signature Stripping

This exercise covers the exploitation of a signature stripping vulnerability in SAML
3 videos
Completed by 2169 students
Takes < 1 Hr. on average
RoR

Medium

PENTESTERLAB

SAML: Comment Injection

This exercise covers the exploitation of a comment injection vulnerability in SAML
2 videos
Completed by 1772 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: PySAML2 SSRF

This exercise covers the exploitation of a SSRF in PySAML2
Completed by 297 students
Takes < 1 Hr. on average
Python

Medium

PENTESTERLAB

SAML: CVE-2021-21239

This exercise covers the exploitation of CVE-2021-21239 (PySAML2)
2 videos
Completed by 139 students
Takes 1-2 Hrs. on average
Python

Medium

PENTESTERLAB

SAML: Signature Wrapping III

This exercise covers the exploitation of a Signature Wrapping Issue in passport-saml (CVE-2022-39299)
2 videos
Completed by 194 students
Takes 1-2 Hrs. on average
Node

Medium

PENTESTERLAB

OAuth2: Authorization Server XSS

This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
2 videos
Completed by 402 students
Takes < 1 Hr. on average
Ruby-On-Rails

Medium

PENTESTERLAB

SAML: Comment Injection II

This exercise covers the exploitation of a comment injection vulnerability in SAML
3 videos
Completed by 662 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

OAuth2: State Fixation

This exercise covers the exploitation of a state fixation in an OAuth2 Client
2 videos
Completed by 422 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Medium

PENTESTERLAB

SAML: SAMLResponse forwarding

This exercise covers how to pass the SAMLResponse from one Service Provider to another
1 video
Completed by 544 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: Trusted Embedded Key

This exercise covers the exploitation of a Service Provider (SP) that doesn't check the certificate provided in the SAMLResponse
2 videos
Completed by 544 students
Takes < 1 Hr. on average
Ruby on Rails

Medium

PENTESTERLAB

SAML: Known Key

This exercise covers the exploitation of a known key in SAML
3 videos
Completed by 559 students
Takes 1-2 Hrs. on average
Ruby on Rails

Medium

PENTESTERLAB

OAuth2: Client CSRF II

This exercise covers the exploitation of a CSRF in an OAuth2 Client
2 videos
Completed by 503 students
Takes 2-4 Hrs. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

OAuth2: Client CSRF

This exercise covers the exploitation of a CSRF in an OAuth2 Client
2 videos
Completed by 982 students
Takes < 1 Hr. on average
Ruby-On-Rails
CWE-352

Medium

PENTESTERLAB

OAuth2: Client OpenRedirect

This exercise covers the exploitation of an OpenRedirect in an OAuth2 Client
2 videos
Completed by 855 students
Takes < 1 Hr. on average
Ruby-On-Rails

Medium

PENTESTERLAB

OAuth2: Authorization Server OpenRedirect

This exercise covers the exploitation of an OpenRedirect in an OAuth2 Authorization Server
3 videos
Completed by 967 students
Takes < 1 Hr. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Predictable State

This exercise covers the exploitation of a predictable state in an OAuth2 Client
2 videos
Completed by 306 students
Takes 2-4 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Predictable State II

This exercise covers the exploitation of a predictable state in an OAuth2 Client
2 videos
Completed by 282 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Client Server XSS

This exercise covers the exploitation of a Cross-Site Scripting in an OAuth2 Client and Server
2 videos
Completed by 384 students
Takes 1-2 Hrs. on average
Ruby-On-Rails

Hard

PENTESTERLAB

SAML: Signature Wrapping

This exercise covers how to use Signature Wrapping to become an arbitrary user
2 videos
Completed by 609 students
Takes < 1 Hr. on average
Ruby on Rails

Hard

PENTESTERLAB

SAML: Signature Wrapping II

This exercise covers how to use Signature Wrapping to become an arbitrary user
2 videos
Completed by 504 students
Takes < 1 Hr. on average
Ruby on Rails

Hard

PENTESTERLAB

OAuth2: Authorization Server XSS II

This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
2 videos
Completed by 288 students
Takes < 1 Hr. on average
Ruby-On-Rails

Hard

PENTESTERLAB

OAuth2: Github HTTP HEAD

This exercise covers the exploitation of the HTTP HEAD issue impacting Github in 2019
2 videos
Completed by 468 students
Takes < 1 Hr. on average
Ruby-On-Rails

Hard

PENTESTERLAB

SAML: Malicious IDP

This exercise covers the creation of a malicious IDP to forge an assertion
Completed by 86 students
Takes 2-4 Hrs. on average
Ruby-on-Rails