Lesson Plan Title: How to Perform WSDL Scanning

 

Concept / Topic To Teach:

Web Services communicate through the use of SOAP requests. These requests are submitted to a web service in an attempt to execute a function defined in the web service definition language (WSDL) file.

 

General Goal(s):

This screen is the API for a web service. Check the WSDL file for this web service and try to get some customer credit numbers.

 

Figure 1 Lesson 22

 

Solution:

 

Open the WSDL file in a new window. There is an operation getCreditCard.

 

 

Intercept the request with WebScarab and change the parameter to getCreditCard

 

Figure 2 WebScarab raw request

 

Figure 3 Lesson 22 Completed