{CodeRoyale}
All challenges
Multiple ChoiceHard 30s

SAML: XML Signature Wrapping

In a SAML XML Signature Wrapping (XSW) attack, the attacker:
Options
  1. 1Moves the signed assertion while injecting a forged one the SP validates
  2. 2Intercepts the TLS session to read the assertion being transmitted
  3. 3Injects SQL into the SAML assertion parameters that are submitted
  4. 4Brute-forces the IdP private signing key offline over many sessions
cybersecmcqhard

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle