BappDescription.html

<p>SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core features - a SAML message editor and an X.509 certificate manager.</p>
<p>The message editor provides the following capabilities:</p>
<ul>
    <li>Sign SAML Messages</li>
    <li>Sign SAML Assertions</li>
    <li>Remove Signatures</li>
    <li>Edit SAML Messages (Supported Messages: SAMLRequest and SAMLResponse)</li>
    <li>Preview eight common XSW Attacks</li>
    <li>Execute eight common XSW Attacks</li>
    <li>Send certificate to SAML Raider Certificate Management</li>
    <li>Undo all changes of a SAML Message</li>
    <li>Supported Profiles: SAML Webbrowser Single Sign-on Profile, Web Services Security SAML Token Profile</li>
    <li>Supported Bindings: POST Binding, Redirect Binding, SOAP Binding, URI Binding</li>
</ul>

<p>The certificate manager provides the following capabilities:</p>
<ul>
    <li>Import X.509 certificates (PEM and DER format)</li>
    <li>Import X.509 certificate chains</li>
    <li>Export X.509 certificates (PEM format)</li>
    <li>Delete imported X.509 certificates</li>
    <li>Display informations of X.509 certificates</li>
    <li>Import private keys (PKCD#8 in DER format and traditional RSA in PEM Format)</li>
    <li>Export private keys (traditional RSA Key PEM Format)</li>
    <li>Cloning X.509 certificates</li>
    <li>Cloning X.509 certificate chains</li>
    <li>Create new X.509 certificates</li>
    <li> Editing and self-sign existing X.509 certificates</li>
</ul>