Damn Vulnerable Web Services, the original PHP version: SOAP, XML-RPC, JSON-RPC and REST endpoints with WSDL enumeration, XXE, XML bomb, XPath injection, command injection, SSRF, REST SQL injection, JWT and CORS flaws.
Not startedDockercommit 4970183x86_64 · aarch64Secret
Exploit each DVWS web service exercise, starting with WSDL enumeration.
The brief for this lab lives in its repository.