f3rn0s/adfspoof repository overview

ADFSpoof is a tool used to perform a Golden SAML attack. This tool works great, but requires a weird version of python cryptography and will break on updated systems due to backwards-compatibility issues with stuff like lxml. This repo aims to give you a quick way to get the tool working without having to worry about installing weird dependencies or whether your version of liblxml is too up to date.

Here is an example usage:

python3 ADFSpoof.py -b keys/cert.bin keys/pkey.bin --server fs.im.the.fs.server.com.au o365 --upn '[email protected]' --objectguid '{objectguid-identifier-value}'

Also, if you want the ObjectGUID you'll probably want to use a tool like msldap that will return all the fields associated with a user object.