Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

WS-Security (WSS)

Martin | Last updated: Jan 13, 2020 10:13AM UTC

Please support OASIS Web Services Security (WSS), or short: WS-Security - https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss Soap UI for example already fully supports it: https://www.soapui.org/soapui-projects/ws-security.html I am aware that there is a simple Burp extension for WS Security, but it supports only the most basic option, and not for example signed requests, or incoming WSS configurations, etc.

Ben, PortSwigger Agent | Last updated: Jan 13, 2020 02:04PM UTC

Hi, As this is a rarely used technology, we are unlikely to implement this in the short term but I can certainly add this as a feature request to our development roadmap. Our development team will then assess the demand for it and decide whether to implement support for it in future versions of Burp. The alternative to this would be for you to use the extender API and create something yourself that provides more coverage than the existing WS Security BApp extension. Please let us know if you require any further information.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.