Questions tagged [websocket]
The websocket tag has no usage guidance.
96
questions
3
votes
1
answer
626
views
Why is the browser not sending cookies with cross-domain WebSocket handshake request?
If I have understood Cross-Site WebSocket Hijacking (CSWSH) attack correctly [1][2][3][4], the attack relies on two things (examples are from the first reference):
the browser sending the cookies set ...
- 559
2
votes
2
answers
622
views
Can a client script (running within a webpage) provide to the browser a certificate to accept in a wss:// connection?
Can a client script provide to the browser a certificate to accept in a wss:// connection? The WebSocket constructor does not seem to have many options.
(I am designing an IoT server that lets the ...
- 379
1
vote
1
answer
130
views
How does masking in WebSockets prevent cache poisoning if the attacker can write their own WebSocket client?
I've been reading about WebSockets, and learned that they apply masking of messages using a XOR cipher. This is done in order to prevent attackers from being able to make the data they send using ...
- 11
2
votes
1
answer
301
views
What's threat if WebSocket connection only checks authentication in the `Open` event
(I had checked the similar topics this/this/this/this, but I couldn't find the exact scenario or example)
Let's say I have a websocket server (MITM and XSS attacks are not in scope) where inside 'open'...
- 2,727
0
votes
1
answer
1k
views
How to view all SSL certificates for a website using Google Chrome?
How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
1
vote
0
answers
119
views
Is SSL over WebSocket less necessary when a connection is established from a smartphone?
I am developing a modification for a game server. The mod hosts a SocketServer which clients can connect to using a smartphone app, allowing them to chat with other players whilst not physically ...
- 11
0
votes
1
answer
162
views
Is it secure to send messages between a WS Server and the client?
Is it secure to send messages between a WebSocket Server and the Client?
An example of sending messages between a (Socket.io) server, is in Node.js:
socket.on("myMessage", function(msg) {
// ...
- 279
0
votes
1
answer
467
views
Securing a Websocket Connection in case of XSS Vulnerability
Goal
Authenticate the Client via HTTP Request.
Authenticate the Client's WebSocket connection.
Prevent exploitation of WebSocket connection(when a XSS Vulnerability is present on website).
How I'm ...
- 3
3
votes
2
answers
462
views
Protecting a PWA authentication token on a public kiosk device
I have a use case where I need a factory-reset tablet device to install and run a simple Progressive Web Application (PWA). The tablet will be mounted on a wall inside a company building that may host ...
- 133
0
votes
2
answers
2k
views
Does sending hashed password over url path parameter secure?
I need to create WebSocket authentication mechanism without using ticketing, so the whole authentication needs to be performed via HTTP (over SSL) GET request which is sent to upgrade connection to ...
- 103
1
vote
1
answer
127
views
Embed Private Key Inside Agent [closed]
We are owing a domain with wildcard certificate (*.mycompany.com). Now we have an application running as an agent on the customer machine. The browser is communicating with the agent by sending ...
1
vote
1
answer
307
views
When Securing a Websocket connection, does the url have to be hard coded?
I have been looking at tips to securing Websocket Connections and found this article https://portswigger.net/web-security/websockets which states that one should "Hard code the URL of the ...
- 75
0
votes
1
answer
267
views
Upgrade to the WebSocket protocol and security
According to my understanding there is upgrade to the WebSocket protocol during the WebSocket handshake.
We use HTTPS connections (we do not use HTTP).
Should we configure the WebSocket protocol in a ...
- 1,479
1
vote
2
answers
923
views
Why WebSockets doesn't apply SOP?
I can't understand why SOP (same-origin policy) cannot block Cross-Origin WebSocket Hijacking, I just read this article and I can't understand from where WebSocket requests comes from.
From where does ...
user226295
23
votes
8
answers
8k
views
Protect API from being tampered?
I'm building an API with websocket that serializes data through JSON. The App itself is a chat application. I came up with the following structure to send my data:
{date: '2020-05-31', time: '14:28:...
- 389
57
votes
3
answers
11k
views
eBay web site tries to connect to wss://localhost:xxxxx - is this legit or they have some Malware JS running?
In helping a corporate user log on to eBay, I noticed that when on the login page, a stream of errors were coming up in the Firefox JS Console about not being able to connect to wss://localhost. This ...
- 631
0
votes
1
answer
960
views
Prevent Cross-site WebSocket hijacking with a custom header and no CORS
Considering I am vulnerable to Cross-site WebSocket hijacking, so my WebSocket handshake (GET to example.com/wss) does not require a random (CSRF) token.
I have defined no CORS settings, so no custom ...
- 159
0
votes
1
answer
933
views
Is sending token authentication information via cookie headers secure?
I am by no means a security engineer , and I have barely started my journey as a web developer. I'm utilizing a Python package known as Django for my backend and react.js for my front end. Recently I ...
- 101
1
vote
1
answer
158
views
How to ensure security in desktop application using WebSockets locally?
I am developing an application containing both Python backend and frontend using Electron. There is no authentication. The two components communicate through WebSocket. How should I prevent the third ...
- 113
0
votes
2
answers
494
views
Hijacking Websocket - it is possible to change the server response?
i read every available hijacking websocket guide/explanation there is in the wild but i still don't understand one thing.
In a CSWSH it is possible to custom requests to the server and retrieve ...
- 115
1
vote
1
answer
188
views
Security in web sockets
Scope: penetration testing of web server with critical information in it (user management).
I had an argument with my college about security in web sockets and I got stuck with him in one topic, ...
1
vote
1
answer
5k
views
How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?
I've pentested a lot of websites and a few apps too but this app eludes them all.
On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
- 121
2
votes
1
answer
446
views
Websockets: Is it safe to allow tokens in url parameters?
For an API, I know that passing tokens in the url has the following security implications:
They get saved in browser history
They’re probably saved in your server’s logs and memory
Users might post ...
- 1,452
1
vote
2
answers
247
views
What are the best practices for naming backend-internal WebSocket endpoints?
In the backend I am currently working on I have a servlet (call it S) and a WebSocket endpoint (call it E). S needs to communicate with E, yet, as of now, any WebSocket client may connect to E.
My ...
- 113
2
votes
0
answers
229
views
Reverse TCP - Bind to a specific port
So, I'm trying to solve a CTF challenge that involves exploiting a remote service. The service doesn't check for the size of the input and there is a buffer overflow vulnerability. However, before I ...
- 121
1
vote
1
answer
2k
views
Is sql injection possible on this websocket?
I was testing a websocket when i found an add to cart request like the following
["{\"ITEMS\":{\"ITEM\":[{\"package_id\":\"123\",\"customer_type\":\"3\",\"qty\":1,\"}"]
I tried to edit the value of ...
- 41
1
vote
1
answer
518
views
How secure is Websocketd?
Is it secure enough for extremely sensitive information like used in banks?
What kind of attack vectors and vulnerabilities does it have?
Is the technology used making the contraption safe enough?
...
- 1,554
0
votes
0
answers
32
views
How can I authenticate websocket over HTTP connection? [duplicate]
I have to communicate over HTTP connection only.
A WebSocket server is setup in Tomcat. A web application is also running on the server.
Now, I have a scenario in which a client will login into the ...
- 101
3
votes
1
answer
2k
views
Certificate Pinning for WebSockets
I have seen many implementations of certificate pinning for HTTPS connections originated from client-side apps running on mobile devices using native libraries and plugins.
I would like to know ...
0
votes
1
answer
2k
views
Websocket connection hostname check
I am testing an application that uses both regular http rest requests and websockets. Burp cert is installed on the device I am using for the tests. I can intercept the encrypted traffic using Burp. ...
- 700
0
votes
2
answers
9k
views
Bypassing valid certificate requirement for websockets
I'm attempting to connect to a websocket server hosted in C# using SuperWebSockets from a page. The issue is that the websocket server generates a self-signed certificate making it difficult to ...
- 259
2
votes
1
answer
1k
views
Websocket Authentication at Opening Handshake Sufficient?
Suppose TLS is used and a session ID was negotiated using standard HTTP mechanisms. With the websocket opening handshake, this session ID is also transferred in the HTTP header.
Suppose the websocket ...
- 53
0
votes
2
answers
2k
views
Websocket connection spoofing
I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically ...
- 787
2
votes
0
answers
782
views
Using a GUID as an authentication token (and how it could be improved)
I'm implementing a Whatsapp Web-like feature for my Android application. User should be able to open an HTTPS web application that displays a QR code (a GUID generated by the server) and scan it using ...
- 121
1
vote
0
answers
2k
views
Is there a way to replay WebSocket messages? [closed]
Burp Suite can intercept WebSocket messages ("WebSockets history" under "Proxy" tab) but does not seem to be able to resend (at least not yet, according to this). I was wondering what techniques or ...
- 43
0
votes
1
answer
213
views
What is a good way to authorize a client at a time to perform an action through websockets?
I am working on a round based web game where only one client/player at a time can perform an action. Throughout the game every player will have a websocket connection to the server. The client will ...
- 109
1
vote
1
answer
2k
views
Integrate PHP and WebSocket authentication securely
I have a PHP server that runs a website, and the website has features such as live notifications, which are basically notifications that get sent to you once a user likes or comments on one of your ...
- 121
2
votes
2
answers
2k
views
JS injected to database using img
How do we best prevent XSS scripted img / html element injected to our database?
Recently I got a case in our website which is using PHP .
Our website got a message service which allows HTML elements ...
- 131
3
votes
0
answers
187
views
What are the design considerations behind exempting WebSockets from the SOP?
I was rather surprised that in my experiments, I could simply connect from one website to a WebSocket server on a different domain/port pair. Subsequent research repeatedly showed that WebSockets do ...
- 143
0
votes
1
answer
649
views
What is a good way of embedding rsa encryption into a messaging app
I'm learning cryptography and stuck with a problem. Suppose I have a chat app that uses sockets. Before the massage is sent it's encripted with the RSA algorithm; what are some good strategies to ...
- 101
4
votes
1
answer
3k
views
Does fetch() of an https: resource verify certificate chain?
The fetch() spec doesn't deal with SSL/TLS since these are socket-level protocols. So I assume that it implements it's calls to lower level connection services to ensure that certificates are verified ...
- 175
2
votes
0
answers
238
views
HTTPS basic auth protected AJAX Token
I have a website (https) that has basic auth enabled for /token subdir
I have websocket ws going through Nginx to become wss
I want to create a bi-directional api on the websocket so that end users ...
- 7,692
0
votes
1
answer
325
views
Encrypt a file in the server and decrypt it in the client without risking the user accessing it?
How can I send an encrypted file from a server to a client, encrypt and use it in the client without risking the user to access it?
I saw an answer where the server saved a file in its memory, and ...
user171096
4
votes
1
answer
726
views
Is it possible to verify a socket connection is coming from a particular web page?
Suppose you implement a streaming api based on websockets at stream.myapp.com. One of the consumers of this api is your website myapp.com. My question is whether stream.myapp.com can verify ...
- 141
4
votes
1
answer
995
views
Security implications of allowing websites to open TCP sockets
I was reading a post about tcp sockets in the browser here and one of the mentioned reasons for not allowing it is that allowing websites to open TCP sockets would be a security risk but doesn't ...
- 778
12
votes
2
answers
18k
views
Why can't websockets support custom headers?
This question is related to this question I asked
To summarise, I'm playing with websockets at the moment and I'm trying to understand how to authenticate a client connecting to the server using a ...
- 1,580
1
vote
1
answer
4k
views
If I use a Python socket over localhost, are there security concerns I need to be aware of?
I am implementing a simple socket in Python to pass data back and forth between two scripts running on the same machine (unfortunately, a socket is the only possible setup for my situation).
This ...
- 111
4
votes
1
answer
2k
views
Is it secure to rely on websocket connection?
In a client-server communication scenario over secure websocket, client is authorized securely and from there on, I have two choices:
Assign a unique random ID (session) and check that on subsequent
...
- 306
1
vote
0
answers
78
views
WSS assign login token on socket?
Is it secure to assign the login token on the socket object? This would be done to avoid having to consistently send their tokens over an encrypted established WebSocket connection. The token would be ...
- 11
1
vote
0
answers
399
views
Check if a Websocket connection origins from a Chrome extension [closed]
I am writing an application that communicates with a Chrome extension via websocket connection. I wonder if there is a way to detect whether the connection actually origins from the extension. The ...
- 232