Ethical Hacking Ch 12

SAML (Security Assertion Markup Language)

A XML- based format that exchanges data about the identity, attributes and entitlements of an individual to an application or service. Builds on WS-Security for better secuiryt

WADL (Web Application Description Language)

A machine-readable XML description of HTTP-based web applications (typically REST web services).

Document Type Definition

A schema for XML documents to help with automation of documents, given in a grammar-like set of rules. Describes data.

Web Service

A specialized web application that differs mainly at the presentation tier level. While web applications typically are HTML-based, web services are XML-based.

WSDigger

A tool used to automate black-box-web service security test

WS-Security

An extension to SOAP to apply security to Web services. The company verifies the user's credentials then gives a token to the user so that when they land on a third party vendor, the user does not have to log in again. The token is used to identify the user. (It's like Single Sign On for the internet)

ZED Attack Proxy

An open-source web application security scanner. (Replaced WebScarab)

SOAPUI

An open-source web service testing application for service-oriented architectures protocol (SOAP) and representational state transfer (REST). Used for web service testing of protocols.

Burp Suite

Can manual do WSDigger

UDDI (Universal Description, Discovery and Integration)

Defines XML-based rules for building directories in which companies advertise themselves and their web services

JSON (JavaScript Object Notation)

It is a lightweight data-interchange format. It is easy for humans and machines to use and understand. This makes for an ideal data-interchange language.

Samurai WTF

Similar to KALI, but focused entirely on Web Applications

REST (Representational State Transfer)

Similar to UDDI but uses HTML operations for acticiti

XML (Extensible Markup Language)

Structured data that can be exchanged between applications and platforms

SOAP (Simple Object Access Protocol)

Uses XML as a messaging protocol for transporting information and instructions between applications

WSDL (Web Services Description Language)

Uses XML as a standard method of describing web services and their specific capabilities