-
Notifications
You must be signed in to change notification settings - Fork 6
SOAP WSDL Discovery
Peter Mueller edited this page Apr 3, 2026
·
1 revision
Vespasian identifies SOAP services and generates WSDL documents from captured traffic.
| Signal | Description |
|---|---|
| SOAPAction header | Presence of SOAPAction HTTP header |
| SOAP envelope | SOAP envelope structure detected in request/response body |
| ?wsdl URL parameter | URL contains ?wsdl parameter |
When probing is enabled, Vespasian actively fetches ?wsdl documents from discovered SOAP endpoints to retrieve full service definitions.
Vespasian extracts SOAP operations from the captured traffic and WSDL documents to produce complete service descriptions.
SOAP/WSDL services are output as WSDL XML documents.
# One-step WSDL discovery
vespasian scan https://app.example.com --api-type wsdl -o service.wsdl
# Two-stage workflow
vespasian crawl https://app.example.com -o capture.json
vespasian generate wsdl capture.json -o service.wsdlVespasian is built by Praetorian. Learn more about the Praetorian Guard attack surface management platform. Licensed under Apache 2.0.