web · hard · 400 pts
Acme accepts SAML responses. Signature is checked against any signed Assertion in the doc; identity comes from /Response/Assertion[0]. Wrap them. --- ### Run locally ```bash cd content/aysec/AYSEC-CTF docker compose up saml-xsw ``` Then open `http://localhost:8000` and start solving.