forked from PortSwigger/espresso
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathBappDescription.html
34 lines (30 loc) · 989 Bytes
/
BappDescription.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
<p>This extension processes and recognizes single sign-on protocols.</p>
<p><strong>Detecting</strong></p>
<p>Supported Protocols:</p>
<ul>
<li>SAML</li>
<li>OpenID</li>
<li>OAuth</li>
<li>BrowserId</li>
<li>OpenID Connect</li>
<li>Facebook Connect</li>
<li>Microsoft Account</li>
</ul>
<p><strong>Attacking</strong></p>
<ul>
<li>WS-Attacker integration while intercepting SAML messages</li>
<li>DTD-Attacker integration while intercepting SAML messages</li>
<li>XML-Encryption-Attacker integration while intercepting SAML messages</li>
</ul>
<p><strong>Beautifier</strong></p>
<ul>
<li>Syntax Highlight</li>
<li>Highlight SSO messages in proxy window and display the protocol type</li>
<li>Show all recognized SSO messages in a history tab</li>
<li>Context menu for 'Analyze SSO Protocol'</li>
</ul>
<p><strong>Editors/Viewers</strong></p>
<ul>
<li>View and edit SAML</li>
<li>View JSON and JSON Web Token (JWT)</li>
</ul>