You will see a WSDL file. You will see a function named calculate_vat . At first glance, it just multiplies numbers. But look closer at the __construct method in the Logger class. SoapBX cleverly uses the SOAP request body to pass serialized objects. If you send XML here expecting a string, but you send an array, the type juggling begins.
soapbx (Tech-focused community) Tag: HOT (Trending/High Engagement Topic) Topic: Advanced Web Application Exploitation & White-Box Testing soapbx oswe HOT