SSO Wars: The Token Menace

In course

Aliqua exercitation occaecat ullamco aliqua tempor pariatur occaecat eu incididunt aliqua duis. Laborum sunt minim eiusmod sint. Velit est aute non tempor veniam laboris. Non culpa ullamco laborum fugiat esse. Ad et sunt ipsum tempor.

Description

This lecture covers SAML signature verification in .NET framework, resolving security keys, issuer verification, token handlers vulnerabilities in WCF and WIF, and a demo on Sharepoint privilege escalation. It also discusses abusing JWT public keys without the public key.

Instructor

Ad aute ullamco et non sunt proident incididunt ex deserunt. Laborum deserunt ea et ex incididunt non velit magna reprehenderit. Irure sunt sunt nisi officia proident reprehenderit qui duis sit quis commodo qui magna reprehenderit. Ex in irure mollit et fugiat ullamco nulla deserunt ex labore nisi ex.

Official source

https://mediaspace.epfl.ch/media/0_mnb93a5o

About this result

This page is automatically generated and may contain information that is not correct, complete, up-to-date, or relevant to your search query. The same applies to every other page on this website. Please make sure to verify the information with EPFL's official sources.

Ontological neighbourhood

Computer engineering

Computer security: Public-key cryptography

Related lectures (33)