Find security gaps in real-time app connections.
What it does
Guides authorized WebSocket security tests to uncover handshake, session, and message-handling vulnerabilities.
When to use it
Use when applications have real-time channels, chat, notifications, or WebSocket-backed APIs.
How to use it
Give it an authorized application to test; it identifies WebSocket security weaknesses through handshake, session, payload, and transport checks.
What you need · 2
The session-binding procedure uses Burp to reconnect with another user's cookies and compare accessible data.
Uses another user's session cookies for session-binding comparisons; the files do not specify how those cookies are obtained.
Access · 2
This skill
attacker.com
Sends captured messages to attacker.com
WebSocket endpoints
Sends security-test WebSocket messages