WSDL Parsing

[GoogleCodeExporter]

Is it possible to add the ability for zaproxy to parse a WSDL and generate 
tests based on the web service.

Original issue reported on code.google.com by jasb...@gmail.com on 18 Dec 2010 at 11:41

[GoogleCodeExporter]

I would be possible, but a significant amount of work.
I'd really recommend using something like http://www.soapui.org/ - thats a 
really powerful web service testing tool. I'd be really surprised if we could 
offer that depth of functionality easily.

Cheers,

Psiinon

Original comment by psii...@gmail.com on 19 Dec 2010 at 10:27

[GoogleCodeExporter]

Having said that, I'm keeping this request open.
Are there things that ZAP could do to make testing web services easier?
Is this a direction we should go in?
What do other people think?

Original comment by psii...@gmail.com on 20 Dec 2010 at 7:22

• Added labels: Type-Enhancement
• Removed labels: Type-Defect

[GoogleCodeExporter]

Original comment by psii...@gmail.com on 23 Jan 2011 at 2:58

• Added labels: Priority-Low
• Removed labels: Priority-Medium

[GoogleCodeExporter]

I second the recommendation to use SOAPUI. I actually removed the existing 
(extremely fragile) WSDL parsing code from WebScarab once SOAPUI became 
available.

It simply has far more functionality than can reasonably be incorporated into a 
tool like ZAP or WebScarab, with limited manpower.

Original comment by rogan.da...@gmail.com on 4 Jan 2012 at 7:09

[GoogleCodeExporter]

Note that this project has been included in the list of suggested projects for 
Google Summer of Code 2014: 
https://www.owasp.org/index.php/GSoC2014_Ideas#OWASP_ZAP_-_Web_Service_.28SOAP.2
9_scanning

Original comment by psii...@gmail.com on 11 Mar 2014 at 9:12

• Added labels: GSoC-Candidate

[GoogleCodeExporter]

https://docs.google.com/document/d/1YSf9yh5A02PX1sVYji6Wa3voxaRj83gDzJNiU7UhilA/
pub
https://groups.google.com/forum/#!topic/zaproxy-develop/8oysS8hUhFg

Original comment by kingtho...@gmail.com on 24 Jun 2014 at 8:13

• Changed state: Started