#soap

[ follow ]
#net #soaphttpclientprotocol #remote-code-execution #ws-security #wss4j #xml-encryption #digital-signature
Information security
fromTheregister
2 days ago

Microsoft won't fix .NET RCE bug affecting enterprise apps

A .NET SoapHttpClientProtocol vulnerability lets attackers manipulate target URLs to write SOAP POST requests to local files, enabling remote code execution against enterprise products.
fromMedium
1 month ago

Sign and Encrypt Soap Envelopes with apache wss4j in Scala

In modern web services, security is a critical concern, especially when dealing with sensitive data. For this SOAP-based services use WS-Security (WSS) to ensure message integrity, confidentiality, and authentication. WS-Security is an extension of SOAP that defines a standard way to secure messages using XML Signature, XML Encryption, and security tokens. In this article, we will explore how to sign and encrypt a SOAP envelopes using Apache WSS4J library in Scala.
Information security
[ Load more ]