05 March 2024 Show Notes 247 - Hacking Google AI and SAML 00:00:31 We Hacked Google A.I. for $50,000 00:17:26 SAML authentication bypass vulnerability in RobotsAndPencils/go-saml [CVE-2023-48703] Additional Links: https://www.aleksey.com/xmlsec/xmlsec-man.html https://github.com/RobotsAndPencils/go-saml 00:22:17 Exploiting CSP Wildcards for Google Domains 00:26:11 ReqsMiner: Automated Discovery of CDN Forwarding Request Inconsistencies and DoS Attacks with Grammar-based Fuzzing