Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/SmeegeSec/WSDLWizard

WSDL Wizard is a Burp Suite plugin written in Python to detect current and discover new WSDL (Web Service Definition Language) files.
https://github.com/SmeegeSec/WSDLWizard

Last synced: about 2 months ago
JSON representation

WSDL Wizard is a Burp Suite plugin written in Python to detect current and discover new WSDL (Web Service Definition Language) files.

Host: GitHub
URL: https://github.com/SmeegeSec/WSDLWizard
Owner: SmeegeSec
Created: 2013-04-20T03:46:32.000Z (over 11 years ago)
Default Branch: master
Last Pushed: 2014-03-08T02:02:47.000Z (over 10 years ago)
Last Synced: 2024-07-30T20:34:38.852Z (about 2 months ago)
Language: Python
Size: 301 KB
Stars: 13
Watchers: 1
Forks: 10
Open Issues: 2
Metadata Files:
- Readme: README.txt

Awesome Lists containing this project

awesome-burp-extensions - WSDL Wizard - WSDL Wizard is a Burp Suite plugin written in Python to detect current and discover new WSDL (Web Service Definition Language) files. (Web Services / SSRF)

README

        Name:           WSDL Wizard

Version:        1.0

Date:           4/19/2013

Author:         Smeege

Contact:        [email protected]

Description:    WSDL Wizard is a Burp Suite plugin written in Python to detect current and discover new WSDL (Web Service Definition Language) files.

                This plugin searches the current site map of a user defined host for URLs with the ?wsdl extension while also building a list

                of viable URLs to fuzz for 'hiding' WSDL files.  Two different methods are available to check for ?wsdl files, using urllib2

                or Burp's API.  When comparing efficiency urllib2 was about 30 percent better however the user can simply switch between 

                methods by running the appropriate function if they choose.  All found WSDL files are added to the existing site map and printed out in the 

                Extender tab output section.

Notes:          In certain situations when web applications require authentication it is better to use the Burp API function to fuzz for WSDL files

                rather than urllib2 which will fail as 401 Unauthorized.