Skip to content

Instantly share code, notes, and snippets.

@aliaspooryorik

aliaspooryorik/EvilSAMLCheck.cfm

Last active March 21, 2018 14:35
Show Gist options
  • Save aliaspooryorik/1ad548bc3821ab3103d444b0d5cad286 to your computer and use it in GitHub Desktop.
Save aliaspooryorik/1ad548bc3821ab3103d444b0d5cad286 to your computer and use it in GitHub Desktop.
Download ZIP
EvilSAMLCheck
Raw
EvilSAMLCheck.cfm
<!---
SEE: https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
Testing if SAML comment injection can be used to chnage XmlText without changing the signature
--->
<cfhttp url="https://gist.githubusercontent.com/aliaspooryorik/5c72724d5c3614f5e31d10d47dd3e52f/raw/be3631a275fcdfcc1dc882bdeeeb947118e19268/EvilSAMLtest.xml" result="saml"></cfhttp>
<cfset xml = XmlParse(saml.filecontent)>
<cfdump var="#XmlSearch(xml, "SAMLResponse/Assertion/Subject/NameID")#">
<cfhttp url="https://gist.githubusercontent.com/aliaspooryorik/3f26b407cd3acbda6019d99e1a98fbb7/raw/64af71732cf6bd04d2c632b9a5dd353fec556f9d/EvilSAMLTest2.xml" result="saml"></cfhttp>
<cfset xml = XmlParse(saml.filecontent)>
<cfdump var="#XmlSearch(xml, "SAMLResponse/Assertion/Subject/NameID")#">
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment