websocket-test

What problem does it solve?

This Skill helps security testers systematically identify WebSocket vulnerabilities such as authentication flaws, authorization bypasses, insecure subscriptions, message injection, replay issues, and connection abuse risks.

Core Features & Use Cases

• WebSocket Endpoint Discovery: Locate ws and wss endpoints, Socket.IO usage, and client-side connection patterns through JavaScript analysis.
• Security Validation Workflows: Test authentication handling, CSWSH exposure, subscription authorization, message integrity, and replay protections using controlled test accounts.
• Use Case: Assess a real-time application that uses WebSocket communication by mapping endpoints from frontend code and validating whether users can only access their own messages and channels.

Quick Start

Use the websocket-test skill to analyze a target application's JavaScript files and create a WebSocket security testing report for discovered endpoints.