Cyber Risks · PortSwigger Research

WSDL Wizard

Summary: WSDL Wizard is a Burp Suite extension, version 1.02 by author Smeege Sec and last updated 01 July 2014, that scans a target server for WSDL files. After Burp maps an application's content, the user right-clicks the target in the site map and selects "Scan for WSDL files," and the extension searches discovered contents for URLs ending in .wsdl and guesses additional WSDL locations from known file names, with results shown in the Burp Extender output tab.

Key Takeaway: The extension carries a low estimated system impact and was last updated in July 2014, and PortSwigger states that extensions are written by third party users and that it makes no warranty about their quality or usefulness for any particular purpose.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related