Exam 312-50v12 topic 1 question 66 discussion

B. WS-Address spoofing Explanation: WS-Address spoofing is an attack technique used to exploit a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This vulnerability allows the transmission of web-service requests and response messages using different TCP connections. An attacker can exploit this vulnerability by modifying the WS-Addressing header to redirect the web-service request to a different endpoint or server. In a WS-Address spoofing attack, the attacker crafts a malicious SOAP message that includes a modified WS-Addressing header. This header contains a spoofed address that points to a malicious endpoint or server controlled by the attacker. When the SOAP message is processed by the web service, it sends the response to the spoofed address specified in the header, allowing the attacker to intercept and modify the response.

B. WS-Address spoofing CEH Book V12 Module 14 P2076 "WS-address provides additional routing information in the SOAP header to support asynchronous communication"

About that: Module 14 Page 2076 from CEH v12 book

WS-address provides additional routing information in the SOAP header to support asynchronous communication In a WS-address spoofing attack, an attacker sends a SOAP message containing fake WS-address information to the server. The <ReplyTo> header consists of the address of the endpoint selected by the attacker rather than the address of the web service client CEH V12 pg 2076

B. WS-Address spoofing