Vulnerability Development: RE: xml over https

["Butler, Theodore" <tbutler () witsusa com>]

SOAP provides the transport envelope for XML. XML represents and extends HTML data by providing additional descriptions 
via metadata. WSDL describes the web services, while UDDI supports registration and discovery of web services. All are 
evolving protocols that take advantage and use existing protocols in support of highly integrated, next generation web 
services.

Ted



-----Original Message-----
From: Mads Rasmussen [mailto:mads () opencs com br]
Sent: Tuesday, February 01, 2005 2:33 PM
To: vuln-dev () securityfocus com
Subject: xml over https



I don't have much details on the application yet, but I will have to 
analyse an application using xml encodings over https.
Don't know if it's SOAP although I don't think so.

I was thinking of applying some injection techniques, if anyone has some 
pointers I would appreciate them

Thanks

Mads