domains / families / security / websocket-security

websocket-security

separate

WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. Use when apps use real-time channels, chat, notifications, or WS-backed APIs.

When to use

• WebSocket handshake
• CSWSH
• tooling (wsrepl, ws-harness, Burp)
• common flaws
• real-time channels
• chat
• notifications
• WS-backed APIs

When not to use

• REST/GraphQL companion testing

Skill page

Source