SAMLReQuest
Summary: PortSwigger's BApp Store lists SAMLReQuest, a Burp Suite extension by Ahmad Abolhadid at version 2.1 that lets security testers view, decode, and modify SAML authentication requests and test an IdP's response to those manipulations. The listing describes SAML as the mechanism behind many single sign-on implementations, where a Service Provider redirects a user to an Identification Provider with a SAML authentication request, and rates the extension's overall system impact as High.
Key Takeaway: SAML underpins single sign-on across many Service Providers, and this tool exists to tamper with authentication requests and see how the IdP answers - the same manipulation an attacker would attempt against your SSO.
Read the original at PortSwigger Research ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026