BYPASSING SAML AUTHENTICATION FOR BEGINNERS!

I'm a bug bounty hunter who's learning everyday and sharing useful resources as I move along. Subscribe to my channel because I'll be sharing my knowledge in new videos regularly.
SIGN UP ON Intigriti:
go.intigriti.co...
BUY ME A COFFEE:
www.buymeacoff...
SOCIAL MEDIA:
Follow me on Twitter: / farah_hawaa
Follow me on Instagram: / farah_hawaa
Connect with me on LinkedIn: / farah-hawa-a012b8162
Lab by / 0xtakemyhand
BURP EXTENSION: portswigger.ne...
SAML Resources:
duo.com/blog/t...
/ hacking-saml
duo.com/blog/d...
www.cloudflare...
Video editor: www.fiverr.com...

[@cyber_boi_]

00:50 What is SAML 01:22 Flow of SAML 01:51 SAML Response 02:30 Signature in SAML 02:57 Bugs 03:16 Signature Not Checked 04:28 Signature only Checked When Exists 06:32 Comment Injection 07:49 SAML Reply & XXE 😊

[@winklerrr]

Thanks for the video! I really like the speed of it - no unnecessary content, straight to the point. 👍

[@alissonbezerra7]

Excellent video! Thank you.

[@curtishoughton9347]

Amazing content really impressed! Concise and straight to the point. Keep it up!

[@CyberBlackHole]

Nice explanation. Keep posting

[@FarahHawa]

Thank you, I will

[@rohankumar6962]

Great explanation. Keep posting videos like this and contributing to community.

[@aviralgupta9869]

Thanks for pentest lab giveaway it will help me learn more 😊

[@FarahHawa]

Best of luck

[@farfaraway2006]

Thanks Farah! very informative and straight forward :)

[@nightwatch4705]

Great explanation. Keep posting. Could you also make a video about making our own vulnerable labs? It will be helpful. Thank you.

[@neerajk_10]

excellent. Quick and precise.

[@techguru5230]

Great... very well explained.. looking for more videos.. thanks for your contribution ❤️

[@broken.insider]

Fallen love with you farah😍😍

[@pawanchandna3038]

Way of explaining is really good...

[@SageTheProfessor]

Thank you for dropping the knowledge Farah. -Sage

[@pranaykumar6291]

Good Explanation..!! Keep Going Farah..

[@medioclick]

Super good and simple explained. Keep posting

[@dhirendrapratap7796]

Thank you so much mam

[@anabakhtar3774]

Another informative video, great content Farah

[@dilaxdilaxsan4314]

Thank you so much very good explanation

[@sanukyadav]

Thanks for this video Farah👍🏻 Subscribed

[@dhruvilpatel1201]

It's Royal Infosec ✌️. #Royal Background

[@pravatkumarshadangi53]

Helpful

[@hassan12141]

Mash Allah nice and great way to explain

[@HasanKhan-sj6zb]

😘😘😘😘

[@M10GAMING-j8y]

great work @farah_hawa

[@afifmalghani755]

So, you have to know one username password pair for these attacks to work? The first 2 attacks.

[@ashokreddyz]

Good explanation can share us what website you took as an example and we'll practice

[@roger5968]

please make video on Buffer Over Flow in detail and lab also.

[@thelolladorfking2416]

As always great content. I'll watch your GraphQL video, it is nice

[@FarahHawa]

Enjoy!

[@chandan1980-s8z]

Please make a video on AWS Pentesting

[@cyberpirate007]

You nailed it 🏁

[@rainshen6628]

Hello, I am an Arab. I like your video very much. I hope you can add subtitles next time

[@princu1]

Best explanation thanks

[@jayeshprajapati1396]

Great explaination

[@uppypasha4908]

Like your vedios .. But I would love if you also focus On system hacking and Android Security and Network attacks too. Because all of it is what is in demand in CyberSec right now.. App exploitation and Server Hacking too... Website hacking is really asaan Sister...

[@jashan8636]

Best explanation ever 💯💯👌. Thanks for sharing one another attack tutorial with us.

[@DontFookGaming]

I think there is one error in this video, she said Google return back SAML response to youtube but graph showed, it returned to User. ? 1:44

[@vrushabhdoshi5664]

Thanks for the video

[@Nothing-lh9hp]

Wow thanks so so much

[@rinkirtkumari5830]

Mam what happened if we change host header and given header pass in Realystate

[@neetech3716]

Nice explanation.

[@WheYPrOTeiNProductions]

Very good explanation and great content You are really amazing... ;)

[@oo7posam581]

Nice but.... Can you teach RCE attack with Practical... Rather than Bwapp or other such practice websites.

[@debprasadbanerjee5005]

Could you bring forward some more labs with SAML?

[@testhacks2757]

Thanks for the great content, where do i get the lab?, Thanks in advance.

[@Test-ed8cm]

yo, are you still gonna upload videos in the future?

[@FarahHawa]

Roldanbrandon.saytek Definitely!!!

[@Test-ed8cm]

@@FarahHawa Nice. Glad to hear that

[@gyansoni2667]

Nice explanation 👍

[@faique2995]

Great, please make a series on web app penetration testing.

[@OfficialAkshayPote]

thank you so much Farah for great explanations. I watch every video of yours. ♥ Keep updating and keep posting great content.

[@suryarathore1059]

How to setup this lab for practice, kindly please show the lab setup also next time

[@linxack]

Nice!!!!

[@srilatha8103]

Can someone share the SAML labs which was mentioned in this Video ? Thankyou

[@kuldeepsingh2983]

thanks for reducing music volume. more concentrated now.

[@KushChoudhary]

That’s great

[@pakflutterdeveloper]

Thanks

[@waqashussain7770]

make some video to start on hacker1 or synack with live hunt

[@mylyf6684]

Good work. Which lab are you using ?

[@lapuranjan5574]

💘

[@sarikamehetre5367]

'll you recommend Apple MacBook air or pro for hacking and coding on virtual box or a Dell laptop

[@FarahHawa]

Rajshree VLOGS if I had the budget, I’d go for MacBook Pro

[@bharathpatel1757]

This is really amazing one.. keep uploading things ... and 😅 Btw what happened to your eyes dhidhi .. take a healthy sleep .. !!

[@Sham-xg9kd]

Your pretty

[@gamesjokes1969]

Good job

[@gamesjokes1969]

My email [e-mail]

[@shibasheeshdey7101]

teaching or reading like a news reader ? :)

[@aishwaryabhagat9104]

How can I access the Lab?

[@vivekmaurya2274]

Mam where u get this sso lab

[@NinjaTech1337]

Best explanation With Lab. 🤗

[@FarahHawa]

Thank you! 🙂

[@ronakparekh9063]

i wana learn a English like you can you teach me plzzz plzzz reply love you my inspiration @FarahHawa

[@0xsolo920]

🔥🔥🔥

[@codetech1803]

Hey how many bounties you have ever got ? Just asking

[@jaydipjani2911]

Hello mam we can used saml for one login in php web appplication ?

[@anasshah5147]

can i get this lab, give me link

[@aryan-gupta]

Is it necessary to learn various web technologies like mern or asp.net to find bugs in a web application ?? I have a beginner knowledge in html, css , javascript ,php , and sql

[@msonawane81]

Now i can get more bounties

[@gyansoni2667]

Why do you not accept linkedin request ?

[@renganathanofficial]

sister there are distortions in the sides of video , anyways awesome video ::))

[@Benjamin-il9sb]

ahh Security Waring caught it

[@jayeshprajapati1396]

Since how many years you are in this field?

[@aneeshnadh5377]

Is the sig value necessary?

[@currentaffairsdaily4011]

hi Farah iam a network engineer want switch my career path to infosec where should i start i dnt have knowledge in coding where should i start

[@MrRaveen007]

one suggestion Speak little slow while preparing videos,felt little faster.but concepts are good.

[@FarahHawa]

I've tried to work on this in the latest video! Lmk if you think it made a difference!

[@ompatel2786]

Hey From Where should I start if I'm Totally Beginner. I'm in 2nd year of clg.

[@harshitkalra6822]

Bhai bugbounty ke liye nahamsec ki videos dekh aur GitHub par nahamsec ki repository bhi hai for beginners

[@ompatel2786]

@@harshitkalra6822 okay Bro👍🏻👍🏻

[@karuppasamykaruppasamy4686]

Are you use hackthebox lap

[@himanshukumar3734]

Age?

[@esoochannel3864]

Can you share this Lab ?

[@FarahHawa]

It's not a publicly available lab. It was created specially for this video.

[@jyotiradityasingh6976]

Nice explanation watched almost all your videos...(A suggestion: You can smile a little while speaking or in introduction)

[@feynman8692]

great explaination farah ... just tell me there are most of the websites that uses jwt based auth right ? so is saml is also used that much ??

[@hassan12141]

Which brup extension u use to check assertion and signature value?

[@FarahHawa]

Added in description :)

[@hassan12141]

@@FarahHawa thanks

[@gousekgn9807]

had u learnt ccna ccnp ccie

[@trustedsecurity6039]

i think you didnt fully understood the comment injection xD

[@domi..infinityrider7293]

Very impressed i love you so cute 😘 🥰

[@bahymohamed5055]

Can i use integrity while i am ouy of europe

[@FarahHawa]

Bahy Mohamed yes, you can!

[@bahymohamed5055]

@@FarahHawa thank you

[@OxOv3rH4uL]

Thanks a lott mam! I hope you will fulfill the gap between what we get and what we want ! Liked and Subbed....

[@GauravChawla111]

One humble feedback, I found your speed of talking a bit too much to understand what you are talking about, may be u can try to speak at a bit alow pace..

[@TheDreamsofMelany]

For a god shake please start making courses . you're too good ;)

[@ashishchauhan9745]

Hindi me video kyu nahi banate aap

[@annelisa2626]

aap english kyu nahi seekh lete? woh Indians ke liye nahi sab ke liye video bana rahi hai. kripya karke English seekh le jaake. :)

[@parthchaudhari1711]

How come you post the exact content which I want to know about

[@anandoganiya9070]

Ma'am can you please crack my cap file I want to use neighborhoods wifi

[@MuhammedRamshin]

thanks