Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

WS-Security (WSS)

Martin Fürholz Jan 13, 2020 10:13AM UTC

Please support OASIS Web Services Security (WSS), or short: WS-Security -
Soap UI for example already fully supports it:

I am aware that there is a simple Burp extension for WS Security, but it supports only the most basic option, and not for example signed requests, or incoming WSS configurations, etc.

Ben Wright Jan 13, 2020 02:27PM UTC Support Center agent


As this is a rarely used technology, we are unlikely to implement this in the short term but I can certainly add this as a feature request to our development roadmap. Our development team will then assess the demand for it and decide whether to implement support for it in future versions of Burp.

The alternative to this would be for you to use the extender API and create something yourself that provides more coverage than the existing WS Security BApp extension.

Please let us know if you require any further information.

Post Your public answer

Your name
Your email address