Part 1 gives you a baseline of what a normal SOAP call in this case would look like. Keep it in mind as a baseline so that when you see part 4 you can compare a legit request/response to a successful attack request/response.

>>> Part 2