Archives by Tag 'Digest'
WSE UsernameToken Password SendHashed – Crack
By admin - Last updated: Monday, November 12, 2007
Using ServiceCapture, Ethereal, Charles or some SOAP sniffer software to inspect the XML sent on wire. Here is XML snippet in the SOAP header. <wsse:usernametoken wsu:id=”….” xmlns:wsu=”….”> <wsse:username>xxxxxx</wsse:username> <wsse:password type=”….”> fCQCp/A9wFD/Gku0L+yF/u+0leg= </wsse:password> <wsse:nonce>eSM7S/iT0KyA39vuWPQcPQ==</wsse:nonce> <wsu:created>1975-12-01T05:28:36Z</wsu:created> </wsse:usernametoken> [STAThread] static void Main() { [...]