PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Why REST Supplanted SOAP for Cross-Application Communication

hackerone.com | blog | #http | #soap | #json | #api | #rest | #web-services
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Traces why REST displaced SOAP for web services: its simpler resource-oriented HTTP model and JSON payloads beat SOAP's XML envelopes and rigid standards for most use cases.
Published
Collected

Related coverage

blog · hackerone.com
Navigating the Maze of API Versioning: Strategies and Pitfalls
Covers API versioning strategies—URI, parameter, and header versioning—with their trade-offs around discoverability, URL cleanliness, and client compatibility, plus pitfalls to avoid when evolving APIs.
blog · aikido.dev
CORS Security: Beyond Basic Configuration
A deep dive into CORS beyond quick fixes: how it evolved from the Same-Origin Policy, how browsers and servers negotiate preflights and credentials, and why setups that look right still fail.
blog · netspi.com
Attacking JavaScript Web Service Proxies with Burp
Explains how JavaScript Web Service Proxies describe WCF web service methods using JSON instead of WSDL, and how to enumerate and attack these endpoints from within Burp.
blog · netspi.com
Hacking Web Services with Burp
Introduces Wsdler, a Burp plugin that parses intercepted WSDL files and generates the SOAP operations as replayable requests, removing the need for Soap-UI when testing web services.
blog · hackerone.com
Understanding HTTP and the Critical Shift to HTTPS
A foundational explainer on how HTTP works over IP and TCP, why plaintext transmission endangers privacy and integrity, and why HTTPS encryption became essential for the web.
blog · hackerone.com
Django Rest Framework vs. Django-Ninja: A High-Level Comparison
Compares Django Rest Framework and Django-Ninja: DRF brings mature flexibility with more boilerplate, while Ninja uses type hints and pydantic for faster, lighter, type-safe API development.
Back