Test 8) Verbose SOAP Fault Message

Verbose SOAP Fault Message Test

Vulnerability Type Dynamic

Test Web Service URI http://[yourhostName]/SOAPFault.asmx?WSDL

Vulnerable Code Block This method throws SoapException.

public string SFTest()
{
    throw new SoapException("Test Fault",
            SoapHeaderException.ClientFaultCode); 
}

Attack Payload N/A

Vulnerable Method Name SFTest

Vulnerable Parameter Name N/A

Response

System.Web.Services.Protocols.SoapException: Test Fault

Indications of Vulnerability

Web server returned: Http status code is 500 (i.e. Internal Error).
SoapException was caught during the service call.