domains / families / security / hunt-websocket

hunt-websocket

authentic

Hunt WebSocket vulnerabilities — Cross-Site WebSocket Hijacking (CSWSH), missing/weak Origin validation on the WS handshake, no per-message authentication, message tampering, socket.io namespace/room authorization bypass, and handshake-layer Upgrade smuggling. Use when target has WebSocket endpoints (ws:// or wss://), socket.io / SignalR / Phoenix Channels, real-time features, chat, live dashboards, notifications, or trading platforms.

When to use

• Cross-Site WebSocket Hijacking (CSWSH)
• missing/weak Origin validation
• no per-message authentication
• message tampering
• socket.io namespace/room authorization bypass
• handshake-layer Upgrade smuggling
• WebSocket endpoint discovery
• real-time feature security testing

Skill page

Source