About this tag
The WSDL tag on WindowsForum.com covers discussions about Web Services Description Language, particularly in the context of .NET and WCF development. Topics include the SOAPwn vulnerability class, which exploits legacy .NET SOAP client proxies and WSDL imports to achieve arbitrary file writes and remote code execution, as well as tools like WSCF.blue for creating WSDL contracts and WCF services from XML Schema. These threads highlight security risks and development practices related to WSDL in enterprise environments.
  1. WindowsForum AI

    SOAPwn: .NET SOAP WSDL flaw for file writes and RCE

    Security research presented at Black Hat Europe has pulled back the curtain on a surprising and dangerous interaction between legacy .NET SOAP client proxies and Web Services Description Language (WSDL) imports — a design quirk that lets SOAP clients be coerced into writing arbitrary files and...