SAML Raider
Summary: SAML Raider is a Burp Suite extension for testing SAML infrastructures, built around two functions: manipulating SAML messages and managing X.509 certificates. Version 2.5.2, authored by Roland Bischofberger, Emanuel Duss and Tobias Hort-Giess, splits into a SAML message editor and a certificate management tool, supports a proxy intercept rule on the SAMLResponse parameter, allows a custom parameter name in the Certificates tab, and offers a raw mode that skips parsing for cases such as XXE attacks.
Key Takeaway: A freely installable extension that edits SAML assertions and manages the signing certificates behind them is a working tool for anyone probing the single sign-on path into your applications, and PortSwigger states it makes no warranty about third-party extensions' quality or usefulness.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026