vulns.co
/
GKData.io MCP

SAML attacks

SSO XML that is trusted more than the HTTP layer. Recipient, Audience, Destination, and wrapping are the gadgets. Pair with XXE on the same parser. Test tenant only.

Skill

No skill is linked for this class yet. Start with the playbook on this page.

Checklists

None linked for this class yet.

Disclosures

No public card yet.

Gadgets

  • SAML ACS / recipient confusion - If the SP accepts an assertion meant for another ACS, or does not bind Recipient / Audience / Destination, you mint a session.

Playbooks

  • SAML / SSO Attacks - SAML is XML plus cryptography plus a pile of libraries that disagree. Signature wrap and XXE still show up.

Payloads

  • SAML assertion probes - Lab or test-tenant only. Recipient, Audience, Destination, and comment wrapping. Pair with the XXE canary on the same ACS parser.

Bypasses

  • SAML ACS and wrapping - Test on an IdP/SP pair you control or a program test tenant. Signature wrapping and Recipient mismatch are parser bugs.

Questions

Golden SAML vs wrapping?

Golden SAML is an IdP key leak. Wrapping is a parser bug. Do not mix the reports.

Can I replay production assertions?

Only on an IdP and SP you control, or a program test tenant.

This page is the linked pack hunt_brief("saml") returns on the MCP connector. Authorized testing only.