Getting started with Burp Proxy’s WebSockets background – The Daily Swig

PROFESSIONAL

Burp Proxy is a web proxy server that lets you view, intercept, and even modify the transmission between Burp’s browser and additionally web servers.

The WebSockets history tab displays the log of any WebSockets messages that Burp’s web browser exchanges with web computers.

This enables you to:

• Study the behavior of a goal website.
• Look for vulnerabilities during WebSockets handshakes and communications.
• Send interesting messages some other tools in Burp Selection for further testing.

To get started using the WebSockets history tab, we recommend using the tutorial below.

For more in depth information about the WebSockets history case, please see the full documentation .

Tutorial

In this tutorial, you’ll understand basics of using the WebSockets history using one of the deliberately vulnerable labs on the Web Security measure Academy.

Step 1 : Access the lab

Available Burp’s browser, and use it gain access to the following lab:

https://portswigger.net/web-security/websockets/lab-manipulating-messages-to-exploit-vulnerabilities

Click Access the lab and log in on your PortSwigger account if motivated. This opens your own example of a deliberately vulnerable purchasing website with a live chat feature.

Step 2: Populate the WebSockets history

To see how the WebSockets history tab works, you first need to be able to populate it with messages.

Position Burp’s browser and Burp Suite side by side.

Concerning the shopping website, click Live chat .

Transmit some messages in the chat box and notice that the WebSockets history is populating just as you do so.

Step 3: View some WebSockets message

To view more details in regards to a particular WebSockets message, press its entry in the history table. This displays it is raw text in the information editor.

Notice the initial handshake message sent to the web server, followed by the exchange regarding messages between the client and even server.

Step 4: Sort together with filter the message story table

You can sort and filtration system the message history kitchen table.

To sort the dinner table using a particular column, please click on the column header. You will probably find it useful to sort the table so that the most recent signals are on top.

To spread out the Filtration settings , click the Filter bar above the history regular.

Step 5: Distribute a message to another tool

You can right click on a request, either inside the history table or the toss editor, to open a framework menu. From here, you can choose from a variety of actions.

One of the most commonly used steps is to send an interesting note to one of Burp’s some other tools for further testing.

You can use Burp Repeater to edit and resend WebSockets messages, to test that your server responds.

Learn more about Burp Proxy’s WebSockets history

You have a new brief overview of using the WebSockets history tab to view WebSockets messages and send them how to other tools for further checking.

For more detailed information about the WebSockets history please see full documentation on the WebSockets history .

Why not learn more about WebSockets in our Web Security Academy?

Source of this news: https://portswigger.net/burp/documentation/desktop/tools/proxy/history/getting-started-with-websockets-history