Cyber Risks · PortSwigger Research

SAML Editor

Summary: PortSwigger's BApp Store lists a Burp Suite extension called SAML Editor, authored by Chris Smith at version 1.1, that adds a tab to Burp's HTTP message editor for encoding and decoding SAML-formatted messages. The listing was last updated on 01 July 2014 and rates the extension's estimated system impact as low.

What you should know: The extension is third-party code PortSwigger explicitly does not warrant for quality or usefulness, and its last update date of 2014 means anyone decoding SAML assertions in Burp is running a decade-old tool against a core authentication protocol.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related