SAML bypass test: craft a SAML response with an arbitrary username and admin role. Leave out the Signature element entirely.
Some plugins skip signature verification when the element is empty. If the server provisions the user, you have admin.
Source: Uber #136169 ($10,000).
4
2August 3, 2026 2.7K 12
