reddit hackernews mail facebook facebook linkedin
WSDL Wizard

WSDL Wizard

Burp Suite plugin to detect current and discover new WSDL files.

WSDL Wizard is a Burp Suite plugin written in Python to detect current and discover new WSDL (Web Service Definition Language) files.
This plugin searches the current site map of a user defined host for URLs with the wsdl extension while also building a list of viable URLs to fuzz for 'hiding' WSDL files. Two different methods are available to check for WSDL files, using urllib2 or Burp's API. When comparing efficiency urllib2 was about 30 percent better however the user can simply switch between methods by running the appropriate function if they choose. All found WSDL files are added to the existing site map and printed out in the Extender tab output section.