websocket-smuggle

WebScoff

A tool to expose security vulnerabilities in WebSocket reverse proxying allowing HTTP requests to be smuggled through

Issues with WebSocket reverse proxying allowing to smuggle HTTP requests

GitHub

341 stars
12 watching
54 forks
Language: Python
last commit: 4 months ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
anshumanpattnaik/http-request-smuggling Detects HTTP Request Smuggling vulnerabilities in web applications 476
palindromelabs/stews A tool suite for security testing of WebSockets 337
nccgroup/wssip A tool that intercepts and manipulates WebSocket traffic between clients and servers. 449
chrisallenlane/novahot A webshell framework for penetration testers to interact with remote systems and execute system commands. 296
swisskyrepo/payloadsallthethings A comprehensive collection of tools and techniques for web application security testing and exploitation 61,904
tfausak/wuss A Haskell library that simplifies the creation of secure WebSocket clients. 69
commandodev/stargate Enables bi-directional communication between web clients and servers over a single TCP socket 39
foxglove/ws-protocol Defines and enables real-time data streaming between devices and servers using web sockets. 103
jcesarstef/dotdotslash Automated tool to test website directory traversal vulnerabilities by injecting user-controlled input into URLs and analyzing responses. 422
trycatchhcf/packetwhisper A tool for stealthy data transfer using DNS queries and text-based steganography to evade attribution and detection. 624
snapview/tungstenite-rs A lightweight WebSocket implementation for Rust. 1,952
eliihen/wsta A command-line tool for interacting with WebSockets 632
portswigger/http-request-smuggler An extension for Burp Suite to help identify and exploit HTTP Request Smuggling vulnerabilities. 961
bishopfox/h2csmuggler Smuggling HTTP traffic past proxy rules to bypass access controls 661
swimos/ratchet A fast and robust implementation of the WebSocket protocol in Rust 41