Skip to content

SOAP WSDL Discovery

Peter Mueller edited this page Apr 3, 2026 · 1 revision

SOAP/WSDL API Discovery

Vespasian identifies SOAP services and generates WSDL documents from captured traffic.

Classification Signals

Signal Description
SOAPAction header Presence of SOAPAction HTTP header
SOAP envelope SOAP envelope structure detected in request/response body
?wsdl URL parameter URL contains ?wsdl parameter

Active Probing

When probing is enabled, Vespasian actively fetches ?wsdl documents from discovered SOAP endpoints to retrieve full service definitions.

SOAP Operation Extraction

Vespasian extracts SOAP operations from the captured traffic and WSDL documents to produce complete service descriptions.

Output Format

SOAP/WSDL services are output as WSDL XML documents.

Example Workflow

# One-step WSDL discovery
vespasian scan https://app.example.com --api-type wsdl -o service.wsdl

# Two-stage workflow
vespasian crawl https://app.example.com -o capture.json
vespasian generate wsdl capture.json -o service.wsdl

See Also

Clone this wiki locally