View the WSDL for the service. Click on an operation name to view it's details.

• getUser
Close

Name: getUser
Binding: ws-user-accountBinding
Endpoint: http://128.198.49.198:8102/mutillidae/webservices/soap/ws-user-account.php
SoapAction: urn:ws-user-account#getUser
Style: rpc
Input:
  use: encoded
  namespace: urn:ws-user-account
  encodingStyle: http://schemas.xmlsoap.org/soap/encoding/
  message: getUserRequest
  parts:
    username: xsd:string
Output:
  use: encoded
  namespace: urn:ws-user-account
  encodingStyle: http://schemas.xmlsoap.org/soap/encoding/
  message: getUserResponse
  parts:
    return: xsd:xml
Namespace: urn:ws-user-account
Transport: http://schemas.xmlsoap.org/soap/http
Documentation: Fetches user information is user exists else returns error message

Sample Request (Copy and paste into Burp Repeater)

POST /mutillidae/webservices/soap/ws-user-account.php HTTP/1.1
Accept-Encoding: gzip,deflate
Content-Type: text/xml;charset=UTF-8
Content-Length: 458
Host: localhost
Connection: Keep-Alive
User-Agent: Apache-HttpClient/4.1.1 (java 1.5)

<soapenv:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:ws-user-account">
<soapenv:Header/>
<soapenv:Body>
<urn:getUser soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<username xsi:type="xsd:string">Jeremy</username>
</urn:getUser>
</soapenv:Body>
</soapenv:Envelope>

• createUser
Close

Name: createUser
Binding: ws-user-accountBinding
Endpoint: http://128.198.49.198:8102/mutillidae/webservices/soap/ws-user-account.php
SoapAction: urn:ws-user-account#createUser
Style: rpc
Input:
  use: encoded
  namespace: urn:ws-user-account
  encodingStyle: http://schemas.xmlsoap.org/soap/encoding/
  message: createUserRequest
  parts:
    username: xsd:string
    password: xsd:string
    signature: xsd:string
Output:
  use: encoded
  namespace: urn:ws-user-account
  encodingStyle: http://schemas.xmlsoap.org/soap/encoding/
  message: createUserResponse
  parts:
    return: xsd:xml
Namespace: urn:ws-user-account
Transport: http://schemas.xmlsoap.org/soap/http
Documentation: Creates new user account

Sample Request (Copy and paste into Burp Repeater)

POST /mutillidae/webservices/soap/ws-user-account.php HTTP/1.1
Accept-Encoding: gzip,deflate
Content-Type: text/xml;charset=UTF-8
Content-Length: 587
Host: localhost
Connection: Keep-Alive
User-Agent: Apache-HttpClient/4.1.1 (java 1.5)

<soapenv:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:ws-user-account">
<soapenv:Header/>
<soapenv:Body>
<urn:createUser soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<username xsi:type="xsd:string">Joe2</username>
<password xsi:type="xsd:string">Holly</password>
<signature xsi:type="xsd:string">Try Harder</signature>
</urn:createUser>
</soapenv:Body>
</soapenv:Envelope>

• updateUser
Close

Name: updateUser
Binding: ws-user-accountBinding
Endpoint: http://128.198.49.198:8102/mutillidae/webservices/soap/ws-user-account.php
SoapAction: urn:ws-user-account#updateUser
Style: rpc
Input:
  use: encoded
  namespace: urn:ws-user-account
  encodingStyle: http://schemas.xmlsoap.org/soap/encoding/
  message: updateUserRequest
  parts:
    username: xsd:string
    password: xsd:string
    signature: xsd:string
Output:
  use: encoded
  namespace: urn:ws-user-account
  encodingStyle: http://schemas.xmlsoap.org/soap/encoding/
  message: updateUserResponse
  parts:
    return: xsd:xml
Namespace: urn:ws-user-account
Transport: http://schemas.xmlsoap.org/soap/http
Documentation: If account exists, updates existing user account else creates new user account

Sample Request (Copy and paste into Burp Repeater)

POST /mutillidae/webservices/soap/ws-user-account.php HTTP/1.1
Accept-Encoding: gzip,deflate
Content-Type: text/xml;charset=UTF-8
Content-Length: 587
Host: localhost
Connection: Keep-Alive
User-Agent: Apache-HttpClient/4.1.1 (java 1.5)

<soapenv:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:ws-user-account">
<soapenv:Header/>
<soapenv:Body>
<urn:updateUser soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<username xsi:type="xsd:string">Joe2</username>
<password xsi:type="xsd:string">Holly</password>
<signature xsi:type="xsd:string">Try Harder</signature>
</urn:updateUser>
</soapenv:Body>
</soapenv:Envelope>

• deleteUser
Close

Name: deleteUser
Binding: ws-user-accountBinding
Endpoint: http://128.198.49.198:8102/mutillidae/webservices/soap/ws-user-account.php
SoapAction: urn:ws-user-account#deleteUser
Style: rpc
Input:
  use: encoded
  namespace: urn:ws-user-account
  encodingStyle: http://schemas.xmlsoap.org/soap/encoding/
  message: deleteUserRequest
  parts:
    username: xsd:string
    password: xsd:string
Output:
  use: encoded
  namespace: urn:ws-user-account
  encodingStyle: http://schemas.xmlsoap.org/soap/encoding/
  message: deleteUserResponse
  parts:
    return: xsd:xml
Namespace: urn:ws-user-account
Transport: http://schemas.xmlsoap.org/soap/http
Documentation: If account exists, deletes user account

Sample Request (Copy and paste into Burp Repeater)

POST /mutillidae/webservices/soap/ws-user-account.php HTTP/1.1
Accept-Encoding: gzip,deflate
Content-Type: text/xml;charset=UTF-8
Content-Length: 587
Host: localhost
Connection: Keep-Alive
User-Agent: Apache-HttpClient/4.1.1 (java 1.5)

<soapenv:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:ws-user-account">
<soapenv:Header/>
<soapenv:Body>
<urn:deleteUser soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<username xsi:type="xsd:string">Joe</username>
<password xsi:type="xsd:string">Holly</password>
</urn:deleteUser>
</soapenv:Body>
</soapenv:Envelope>