WS-Attacker is a modular framework for web services penetration testing developed by the Chair of Network and Data Security, Ruhr University Bochum, and Hackmanit GmbH. It allows loading WSDL files, sending SOAP messages, and extending functionality with plugins and libraries for specific Web Services attacks. More information on its architecture and extensibility can be found in the Penetration Testing Tool for Web Services Security paper. Current version supports SOAPAction spoofing, WS-Addressing spoofing, XML Signature Wrapping, and XML-based DoS attacks.
FEATURES
This tool is not verified yet and doesn't have listed features.
Did you submit the verified tool? Sign in to add features.
Are you the author? Claim the tool by clicking the icon above. After claiming, you can add features.
ALTERNATIVES
Collection of vulnerable ARM binaries for beginner vulnerability researchers & exploit developers.
A penetration testing tool that focuses on web browser exploitation
A Linux-based environment for penetration testing and vulnerability exploitation
A DNS rebinding exploitation framework
A Python library for exploiting race conditions in web apps
Introduction to using GScript for Red Teams