What problem does it solve? WebSocket connections often skip the security scrutiny applied to HTTP APIs, leaving real-time channels exposed to authentication bypass, cross-site hijacking, and unauthorized message subscriptions. This Skill provides a systematic methodology for locating and testing WebSocket endpoints during authorized security assessments. ## Core Features & Use Cases - Endpoint Discovery: Locates WebSocket endpoints by searching JavaScript for new WebSocket(, ws://, wss://, Socket.IO, and STOMP patterns. - Authentication & Authorization Testing: Covers post-handshake token switching, unauthenticated connections, and IDOR via tampered channel/room/user IDs. - Attack Coverage: Includes CSWSH origin validation checks, message injection (XSS/SQLi/command), replay attacks, and connection exhaustion DoS verification. - Use Case: During an authorized pentest of a chat application, grep the site's JS for wss:// endpoints, then use the provided Python scripts to verify whether modifying a roomId in a subscribe message leaks another user's private messages. ## Quick Start Ask the agent to run the WebSocket security test against the authorized target, starting by extracting all ws:// and wss:// endpoints from the downloaded JavaScript files.
