Ethical Hacking Ch 12
SAML (Security Assertion Markup Language)
A XML- based format that exchanges data about the identity, attributes and entitlements of an individual to an application or service. Builds on WS-Security for better secuiryt
WADL (Web Application Description Language)
A machine-readable XML description of HTTP-based web applications (typically REST web services).
Document Type Definition
A schema for XML documents to help with automation of documents, given in a grammar-like set of rules. Describes data.
Web Service
A specialized web application that differs mainly at the presentation tier level. While web applications typically are HTML-based, web services are XML-based.
WSDigger
A tool used to automate black-box-web service security test
WS-Security
An extension to SOAP to apply security to Web services. The company verifies the user's credentials then gives a token to the user so that when they land on a third party vendor, the user does not have to log in again. The token is used to identify the user. (It's like Single Sign On for the internet)
ZED Attack Proxy
An open-source web application security scanner. (Replaced WebScarab)
SOAPUI
An open-source web service testing application for service-oriented architectures protocol (SOAP) and representational state transfer (REST). Used for web service testing of protocols.
Burp Suite
Can manual do WSDigger
UDDI (Universal Description, Discovery and Integration)
Defines XML-based rules for building directories in which companies advertise themselves and their web services
JSON (JavaScript Object Notation)
It is a lightweight data-interchange format. It is easy for humans and machines to use and understand. This makes for an ideal data-interchange language.
Samurai WTF
Similar to KALI, but focused entirely on Web Applications
REST (Representational State Transfer)
Similar to UDDI but uses HTML operations for acticiti
XML (Extensible Markup Language)
Structured data that can be exchanged between applications and platforms
SOAP (Simple Object Access Protocol)
Uses XML as a messaging protocol for transporting information and instructions between applications
WSDL (Web Services Description Language)
Uses XML as a standard method of describing web services and their specific capabilities
