Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer
general Blog post

SAML roulette: the hacker always wins

Source: PortSwigger Research · Published · Last checked 3 hours ago ·
SAML roulette: the hacker always wins
Image: PortSwigger Research
Read original source ↗ (portswigger.net)

Publisher excerpt From PortSwigger Research

Introduction In this post, we’ll show precisely how to chain round-trip attacks and namespace confusion to achieve unauthenticated admin access on GitLab Enterprise by exploiting the ruby-saml library

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.

Keywords: generalPortSwigger Researchcybersecurity newssecurity news Pakistan

Reference: PortSwigger Research — portswigger.net ↗

Related news

3AM Affiliate Embraces AI-Like Loops in European School AttackCrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, DreadnodeUK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training