ekmixon / wsdlwizard Goto Github PK

Name:           WSDL Wizard
Version:        1.0
Date:           4/19/2013
Author:         Smeege
Contact:        [email protected]

Description:    WSDL Wizard is a Burp Suite plugin written in Python to detect current and discover new WSDL (Web Service Definition Language) files.
                This plugin searches the current site map of a user defined host for URLs with the ?wsdl extension while also building a list
                of viable URLs to fuzz for 'hiding' WSDL files.  Two different methods are available to check for ?wsdl files, using urllib2
                or Burp's API.  When comparing efficiency urllib2 was about 30 percent better however the user can simply switch between 
                methods by running the appropriate function if they choose.  All found WSDL files are added to the existing site map and printed out in the 
                Extender tab output section.

Notes:          In certain situations when web applications require authentication it is better to use the Burp API function to fuzz for WSDL files
                rather than urllib2 which will fail as 401 Unauthorized.