WebApp Sec mailing list archives

Re: SOAP Debugger - a simple, generic SOAP client


From: Zhiguly Hotel <zhiguly () gmail com>
Date: Thu, 16 Jun 2005 16:45:15 -0500

Hi,

I was looking for same kind tools but didn't end with anything useful,
so may be this is a first. But there always is trade off when use
existing API to fuzz which may not give you enough control to build
the sort of malformed messages you need. So I manual built envelope,
header,body, even xml etc. using Commons HTTPClient or Python httplib
with some success!

-zh



On 6/15/05, Chuck <chuck.lists () gmail com> wrote:
Hi all,

   I was looking for web service tools and I came across SOAP
Debugger, available at http://shh.thathost.com/pub-java/.  Has anyone
used it?  It is a neat little Java program (with a GUI) where you feed
it a WSDL file and it lets you craft a request to the web service and
displays the result.  I tried it with the GoogleAPI wsdl and it worked
for the spell check function, but it gave an error on the output from
the seach... I guess that it couldn't interpret the result because it
was not a basic type.  The author says that he wrote it to fulfil his
one time requirements and is now on to other things so he will not do
any work on it, but it is open source.

   So, I was thinking about messing around with this, at least getting
it to use a proxy so that I could run it through WebScarab and maybe
even seeing if I could alter it to be a WebScarab plugin.  It would be
great to have some fuzzing ability, too.  But, before I did any work
on it, I wanted to check to see if there is anything else better
already out there.  Anyone know of anything?

Chuck



Current thread: