SAML SSO Exploitation: Breaking the Trust Chain

XML signature wrapping variants, void canonicalization bypass, NameID comment injection, SAML attribute injection, and token replay against enterprise SSO