SAML: Malicious IDP

Bookmarked!

This exercise covers the creation of a malicious IDP to forge an assertion

PRO Medium 2-4 Hrs. 72 Authentication / Authorization Badge
Course

In this course, you will learn how to exploit an insecure SAML implementation that allows attackers to set their own Identity Provider (IDP) without validation. By creating and configuring a malicious IDP, you can trick the Service Provider into thinking you are an admin user.

Ready to practice?

Get access to this lab and 600+ hands-on exercises with a PRO subscription.