SSO Wars: The Token Menace

In course

Lorem laboris proident nostrud dolore magna esse irure do Lorem voluptate ad fugiat ad id. Quis velit deserunt anim proident in nostrud excepteur incididunt veniam. Aliquip pariatur sunt anim sit in occaecat tempor duis sit commodo ad. Aliquip magna mollit ad pariatur nulla anim do aliqua in eu dolore deserunt. Eu officia occaecat deserunt amet eu esse sunt eiusmod et enim officia. Fugiat consequat aute velit amet.

Description

This lecture covers SAML signature verification in .NET framework, resolving security keys, issuer verification, token handlers vulnerabilities in WCF and WIF, and a demo on Sharepoint privilege escalation. It also discusses abusing JWT public keys without the public key.

Instructor

Quis sit anim aute irure laboris. Dolor aute deserunt cillum enim ut voluptate. Exercitation consectetur laboris commodo quis id duis non laborum anim Lorem excepteur eiusmod. Anim deserunt excepteur ullamco dolor cillum duis. Duis sint eiusmod magna cillum ullamco sunt do labore magna.

Official source

https://mediaspace.epfl.ch/media/0_mnb93a5o

About this result

This page is automatically generated and may contain information that is not correct, complete, up-to-date, or relevant to your search query. The same applies to every other page on this website. Please make sure to verify the information with EPFL's official sources.

Ontological neighbourhood

Computer engineering

Computer security: Public-key cryptography

Related lectures (33)