From da6b0c8e7a911dbab7af2087e93e061bb1090746 Mon Sep 17 00:00:00 2001 From: webpwnized Date: Tue, 29 Oct 2024 16:28:10 -0400 Subject: [PATCH] 2.11.24 Update web services --- .../scan-application-with-stackhawk.yml | 2 +- .../soap/docs/ws-test-connectivity.html | 46 +++++++++---------- 2 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/scan-application-with-stackhawk.yml b/.github/workflows/scan-application-with-stackhawk.yml index c9f936c..ac37c50 100644 --- a/.github/workflows/scan-application-with-stackhawk.yml +++ b/.github/workflows/scan-application-with-stackhawk.yml @@ -120,7 +120,7 @@ jobs: uses: github/codeql-action/upload-sarif@main with: # Path to SARIF file relative to the root of the repository - sarif_file: stackhawk.sarif + sarif_file: mutillidae/stackhawk.sarif # Optional category for the results # Used to differentiate multiple results for one commit category: StackHawk \ No newline at end of file diff --git a/src/webservices/soap/docs/ws-test-connectivity.html b/src/webservices/soap/docs/ws-test-connectivity.html index 0362836..ee66d88 100644 --- a/src/webservices/soap/docs/ws-test-connectivity.html +++ b/src/webservices/soap/docs/ws-test-connectivity.html @@ -52,8 +52,8 @@

Request Structure

Accept: */* Content-Type: text/xml; charset=utf-8 SOAPAction: "urn:testConnectivity" -Content-Length: 180 -Connection: keep-alive +Content-Length: 185 +Connection: close <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"> <soapenv:Header/> @@ -74,6 +74,27 @@

Example Using curl (Command Line)

</soapenv:Body> </soapenv:Envelope>' +

How to Use in Burp Repeater

+
    +
  1. Open Burp Suite and navigate to the Repeater tab.
  2. +
  3. Copy the following request and paste it into the Repeater window:
  4. +
+ +
POST /webservices/soap/ws-test-connectivity.php HTTP/1.1
+Host: mutillidae.localhost
+Content-Type: text/xml; charset=utf-8
+SOAPAction: "urn:testConnectivity"
+Content-Length: 147
+
+<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
+<soapenv:Header/>
+<soapenv:Body>
+  <testConnectivity/>
+</soapenv:Body>
+</soapenv:Envelope>
+ +

Click Send to test the connectivity. If the service is working, the server will respond with a status message.

+

Expected Response

If the request is successful, the server will respond with the following SOAP message:

<?xml version="1.0"?>
@@ -98,27 +119,6 @@ 

Troubleshooting

-

How to Use in Burp Repeater

-
    -
  1. Open Burp Suite and navigate to the Repeater tab.
  2. -
  3. Copy the following request and paste it into the Repeater window:
  4. -
- -
POST /webservices/soap/ws-test-connectivity.php HTTP/1.1
-Host: mutillidae.localhost
-Content-Type: text/xml; charset=utf-8
-SOAPAction: "urn:testConnectivity"
-Content-Length: 147
-
-<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
-   <soapenv:Header/>
-   <soapenv:Body>
-      <testConnectivity/>
-   </soapenv:Body>
-</soapenv:Envelope>
- -

Click Send to test the connectivity. If the service is working, the server will respond with a status message.

-

Learn More

Try sending multiple requests and observe how the timestamp changes in each response.