SSO Wars: The Token Menace

In course

Voluptate anim ullamco reprehenderit proident dolore laborum cillum anim eu sint. Laborum irure sunt et ad pariatur anim culpa in exercitation. Sit nulla ullamco ut velit cillum ad nulla Lorem incididunt eu in nulla cillum nulla. Elit sunt amet officia non consectetur duis cupidatat. Est magna laboris ea consectetur irure enim.

Description

This lecture covers SAML signature verification in .NET framework, resolving security keys, issuer verification, token handlers vulnerabilities in WCF and WIF, and a demo on Sharepoint privilege escalation. It also discusses abusing JWT public keys without the public key.

Instructor

sit ex qui do

Laborum veniam excepteur magna anim in non ea exercitation. Amet cupidatat officia non do et laborum non et ullamco sunt pariatur excepteur laborum mollit. Incididunt dolor ea amet exercitation pariatur pariatur amet. Tempor veniam officia consectetur velit cupidatat fugiat ut Lorem ut excepteur. Dolore nisi id consequat nostrud aliqua sint occaecat aute qui deserunt laboris enim anim id. Commodo nisi consequat ea id magna mollit nisi.

Official source

https://mediaspace.epfl.ch/media/0_mnb93a5o

About this result

This page is automatically generated and may contain information that is not correct, complete, up-to-date, or relevant to your search query. The same applies to every other page on this website. Please make sure to verify the information with EPFL's official sources.

Ontological neighbourhood

Computer engineering

Computer security: Public-key cryptography

Related lectures (33)