id: wsdl-api

info:
  name: WSDL API - Detect
  author: jarijaas
  severity: info
  description: WSDL API was detected.
  reference:
    - https://www.w3.org/TR/wsdl/
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
    max-request: 1
  tags: exposure,api,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/?wsdl"

    matchers:
      - type: word
        words:
          - "wsdl:definitions"
# digest: 4a0a004730450220776ea1fbf9a3237a6cabbb86e1ac403dfa768ff719fda2307d08541c432eb860022100dc1f38bc344f96d2ec082a11092af9dafa5cf04f7b1ac9c30423b2ff7b800ab8:922c64590222798bb761d5b6d8e72950