SAML Raider

SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core features - a SAML message editor and an X.509 certificate manager.

The message editor provides the following capabilities:

• Sign SAML messages & assertions (signature spoofing attack)
• Remove signatures (signature exclusion attack)
• Edit SAML messages (SAMLRequest, SAMLResponse & custom parameter names)
• Perform eight common XSW attacks
• Insert XXE and XSLT attack payloads
• Supported Profiles: SAML Webbrowser Single Sign-on Profile, Web Services Security SAML Token Profile
• Supported Bindings: POST Binding, Redirect Binding, SOAP Binding, URI Binding

The certificate manager provides the following capabilities:

• Import X.509 certificates (PEM and DER format)
• Import X.509 certificate chains
• Export X.509 certificates (PEM format)
• Delete imported X.509 certificates
• Display informations of X.509 certificates
• Import private keys (PKCD#8 in DER format and traditional RSA in PEM Format)
• Export private keys (traditional RSA Key PEM Format)
• Cloning X.509 certificates
• Cloning X.509 certificate chains
• Create new X.509 certificates
• Editing and self-sign existing X.509 certificates