https://insinuator.net/tags/wcf/ Recent content in WCF on Insinuator.net - Bold Statements Hugo en-us Mon, 01 Aug 2016 00:00:00 +0000 https://insinuator.net/2016/08/pentesting-webservices-with-net.tcp-binding/ Mon, 01 Aug 2016 00:00:00 +0000 https://insinuator.net/2016/08/pentesting-webservices-with-net.tcp-binding/ <p>Hi all,</p> <p>Most of you that are  pentesters  may have already tested plenty of webservices using SOAP (<em>Simple Object Access Protocol</em>)* *for communication. Typically, such SOAP messages are transferred over HTTP (<em>Hypertext Transfer Protocol</em>) and are encapsulated in XML (<em>Extensible Markup Language</em>). Microsoft has developed different representations of this protocols to reduce the network load. As these representations/protocols aren’t really covered by typical tools out there, this post will show you some of them, and a proxy which can be used to simplify the testing.</p> https://insinuator.net/2011/12/python-library-for-de-and-encoding-of-wcf-binary-streams/ Fri, 23 Dec 2011 00:00:00 +0000 https://insinuator.net/2011/12/python-library-for-de-and-encoding-of-wcf-binary-streams/ <p>In a .NET environment WCF services can use the proprietary WCF binary XML protocol described <a href="https://blogs.msdn.com/b/drnick/archive/2009/09/11/binary-encoding-part-4.aspx">here</a>. Microsoft uses this protocol to save some time parsing the transmitted XML data. If you have to (pen-) test such services, it would be nice to read (and modify) the communication between (for example) clients and servers. One possibility is <a href="http://www.fiddler2.com">Fiddler</a>.</p> <p>Fiddler’s strengths include its extensibility and its WCF binary plugins. Sadly, these plugins can only decode and display the binary content as XML text.</p>