2,000+ Free Courses with Certificates: Coding, AI, SQL, and More
The Fastest Way to Become a Backend Developer Online
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore WebSocket hacking techniques in this conference talk from Derbycon 2019. Learn about WebSocket integration, inspection, and cross-site hijacking from experts Michael Fowl and Nick Defoe. Discover how to leverage old vulnerabilities and utilize tools like Burp Suite, Repeater, and Sequel Map for WebSocket exploitation. Gain insights into multithreading, Python implementation, loopback techniques, and post request injection methods to enhance your understanding of WebSocket security.
Syllabus
Intro
Agenda
Michael Fowl
Nick Defoe
What is WebSocket
WebSocket Integration
WebSocket Inspection
Crosssite WebSocket Hijacking
Old Vulnerabilities
Other Tools
Burp Suite
Repeater
Sequel Map
Multithreading
Python
Loopback
Post Request
Injection
Outro