Questions tagged [websocket]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
3 views

Signed client certificate not accepted by websocket server [migrated]

Want to set up authentication in a python websocket server which builds up its ssl context like: ctx = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER) ctx.load_cert_chain('certificates/server_cert.pem', '...
22
votes
8answers
6k views

Protect API from being tampered?

I'm building an API with websocket that serializes data through JSON. The App itself is a chat application. I came up with the following structure to send my data: {date: '2020-05-31', time: '14:28:...
57
votes
3answers
9k views

eBay web site tries to connect to wss://localhost:xxxxx - is this legit or they have some Malware JS running?

In helping a corporate user log on to eBay, I noticed that when on the login page, a stream of errors were coming up in the Firefox JS Console about not being able to connect to wss://localhost. This ...
0
votes
1answer
43 views

Prevent Cross-site WebSocket hijacking with a custom header and no CORS

Considering I am vulnerable to Cross-site WebSocket hijacking, so my WebSocket handshake (GET to example.com/wss) does not require a random (CSRF) token. I have defined no CORS settings, so no custom ...
0
votes
1answer
76 views

Is sending token authentication information via cookie headers secure?

I am by no means a security engineer , and I have barely started my journey as a web developer. I'm utilizing a Python package known as Django for my backend and react.js for my front end. Recently I ...
0
votes
0answers
86 views

Protect Socket.IO server against DOS

I'm currently pentesting an Angular application that connects to a Socket.IO server. The authentication process is in the line of: Unauthenticated request gets redirected to SSO for login Login ...
1
vote
1answer
53 views

How to ensure security in desktop application using WebSockets locally?

I am developing an application containing both Python backend and frontend using Electron. There is no authentication. The two components communicate through WebSocket. How should I prevent the third ...
0
votes
2answers
89 views

Hijacking Websocket - it is possible to change the server response?

i read every available hijacking websocket guide/explanation there is in the wild but i still don't understand one thing. In a CSWSH it is possible to custom requests to the server and retrieve ...
1
vote
1answer
84 views

Security in web sockets

Scope: penetration testing of web server with critical information in it (user management). I had an argument with my college about security in web sockets and I got stuck with him in one topic, ...
0
votes
1answer
673 views

How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

I've pentested a lot of websites and a few apps too but this app eludes them all. On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
2
votes
1answer
57 views

Websockets: Is it safe to allow tokens in url parameters?

For an API, I know that passing tokens in the url has the following security implications: They get saved in browser history They’re probably saved in your server’s logs and memory Users might post ...
1
vote
2answers
67 views

What are the best practices for naming backend-internal WebSocket endpoints?

In the backend I am currently working on I have a servlet (call it S) and a WebSocket endpoint (call it E). S needs to communicate with E, yet, as of now, any WebSocket client may connect to E. My ...
2
votes
0answers
63 views

Reverse TCP - Bind to a specific port

So, I'm trying to solve a CTF challenge that involves exploiting a remote service. The service doesn't check for the size of the input and there is a buffer overflow vulnerability. However, before I ...
1
vote
1answer
445 views

Is sql injection possible on this websocket?

I was testing a websocket when i found an add to cart request like the following ["{\"ITEMS\":{\"ITEM\":[{\"package_id\":\"123\",\"customer_type\":\"3\",\"qty\":1,\"}"] I tried to edit the value of ...
1
vote
1answer
259 views

How secure is Websocketd?

Is it secure enough for extremely sensitive information like used in banks? What kind of attack vectors and vulnerabilities does it have? Is the technology used making the contraption safe enough? ...
0
votes
0answers
26 views

How can I authenticate websocket over HTTP connection? [duplicate]

I have to communicate over HTTP connection only. A WebSocket server is setup in Tomcat. A web application is also running on the server. Now, I have a scenario in which a client will login into the ...
3
votes
1answer
545 views

Certificate Pinning for WebSockets

I have seen many implementations of certificate pinning for HTTPS connections originated from client-side apps running on mobile devices using native libraries and plugins. I would like to know ...
0
votes
1answer
483 views

Websocket connection hostname check

I am testing an application that uses both regular http rest requests and websockets. Burp cert is installed on the device I am using for the tests. I can intercept the encrypted traffic using Burp. ...
0
votes
1answer
2k views

Bypassing valid certificate requirement for websockets

I'm attempting to connect to a websocket server hosted in C# using SuperWebSockets from a page. The issue is that the websocket server generates a self-signed certificate making it difficult to ...
2
votes
1answer
518 views

Websocket Authentication at Opening Handshake Sufficient?

Suppose TLS is used and a session ID was negotiated using standard HTTP mechanisms. With the websocket opening handshake, this session ID is also transferred in the HTTP header. Suppose the websocket ...
0
votes
2answers
444 views

Websocket connection spoofing

I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically ...
2
votes
0answers
281 views

Using a GUID as an authentication token (and how it could be improved)

I'm implementing a Whatsapp Web-like feature for my Android application. User should be able to open an HTTPS web application that displays a QR code (a GUID generated by the server) and scan it using ...
1
vote
0answers
781 views

Is there a way to replay WebSocket messages? [closed]

Burp Suite can intercept WebSocket messages ("WebSockets history" under "Proxy" tab) but does not seem to be able to resend (at least not yet, according to this). I was wondering what techniques or ...
0
votes
1answer
59 views

What is a good way to authorize a client at a time to perform an action through websockets?

I am working on a round based web game where only one client/player at a time can perform an action. Throughout the game every player will have a websocket connection to the server. The client will ...
1
vote
1answer
1k views

Integrate PHP and WebSocket authentication securely

I have a PHP server that runs a website, and the website has features such as live notifications, which are basically notifications that get sent to you once a user likes or comments on one of your ...
2
votes
2answers
516 views

JS injected to database using img

How do we best prevent XSS scripted img / html element injected to our database? Recently I got a case in our website which is using PHP . Our website got a message service which allows HTML elements ...
3
votes
0answers
97 views

What are the design considerations behind exempting WebSockets from the SOP?

I was rather surprised that in my experiments, I could simply connect from one website to a WebSocket server on a different domain/port pair. Subsequent research repeatedly showed that WebSockets do ...
0
votes
1answer
151 views

What is a good way of embedding rsa encryption into a messaging app

I'm learning cryptography and stuck with a problem. Suppose I have a chat app that uses sockets. Before the massage is sent it's encripted with the RSA algorithm; what are some good strategies to ...
4
votes
1answer
1k views

Does fetch() of an https: resource verify certificate chain?

The fetch() spec doesn't deal with SSL/TLS since these are socket-level protocols. So I assume that it implements it's calls to lower level connection services to ensure that certificates are verified ...
2
votes
0answers
169 views

HTTPS basic auth protected AJAX Token

I have a website (https) that has basic auth enabled for /token subdir I have websocket ws going through Nginx to become wss I want to create a bi-directional api on the websocket so that end users ...
0
votes
1answer
100 views

Encrypt a file in the server and decrypt it in the client without risking the user accessing it?

How can I send an encrypted file from a server to a client, encrypt and use it in the client without risking the user to access it? I saw an answer where the server saved a file in its memory, and ...
4
votes
1answer
378 views

Is it possible to verify a socket connection is coming from a particular web page?

Suppose you implement a streaming api based on websockets at stream.myapp.com. One of the consumers of this api is your website myapp.com. My question is whether stream.myapp.com can verify ...
4
votes
1answer
429 views

Security implications of allowing websites to open TCP sockets

I was reading a post about tcp sockets in the browser here and one of the mentioned reasons for not allowing it is that allowing websites to open TCP sockets would be a security risk but doesn't ...
5
votes
1answer
10k views

Why can't websockets support custom headers?

This question is related to this question I asked To summarise, I'm playing with websockets at the moment and I'm trying to understand how to authenticate a client connecting to the server using a ...
1
vote
1answer
2k views

If I use a Python socket over localhost, are there security concerns I need to be aware of?

I am implementing a simple socket in Python to pass data back and forth between two scripts running on the same machine (unfortunately, a socket is the only possible setup for my situation). This ...
2
votes
1answer
1k views

Is it secure to rely on websocket connection?

In a client-server communication scenario over secure websocket, client is authorized securely and from there on, I have two choices: Assign a unique random ID (session) and check that on subsequent ...
1
vote
0answers
34 views

WSS assign login token on socket?

Is it secure to assign the login token on the socket object? This would be done to avoid having to consistently send their tokens over an encrypted established WebSocket connection. The token would be ...
1
vote
0answers
263 views

Check if a Websocket connection origins from a Chrome extension [closed]

I am writing an application that communicates with a Chrome extension via websocket connection. I wonder if there is a way to detect whether the connection actually origins from the extension. The ...
3
votes
2answers
209 views

Integrity of secure WebSocket

I'm using a secure WebSocket connection (wss://...) for data transfer to and from a single-page app. Once a client has been authenticated, should I be passing some sort of authentication token with ...
0
votes
1answer
87 views

RFC 6455: Form fields with starting |Sec-| mean?

In RFC 6455 which is the Websocket Protocol specification it says: It is similarly intended to fail to establish a connection when data from other protocols, especially HTTP, is sent to a ...
0
votes
1answer
378 views

Measures to secure websockets for non-browser clients

I've been looking into the security risks that needed to be addressed when setting up an application using websockets, but the major issues I've looked at (CSRF, XSS, cross-site websocket hijacking) ...
1
vote
1answer
1k views

Secure JSON on websocket - encryption

I have an websocket connection without SSL certificate (just plain WS, not WSS). Every message is transferred as JSON (text). What might be best way to secure communication? Which encryption ...
4
votes
3answers
4k views

Do websockets represent a security problem to my local machine?

To work around a problem with IntelliJ, I have been recommended to configure my local Docker daemon to work on port 2375 without TLS authentication. I am concerned however that a malicious website ...
1
vote
1answer
2k views

Why can't I send raw HTTP requests with arbitrary headers from a web application? [closed]

I am trying to write a script to test a Suricata network signature. To do this I need to simulate the same user agent as the malware. I tried the following. $.ajaxSetup({ beforeSend: function(...
0
votes
1answer
654 views

websocket connection over TLS using nopoll fails with SSL_ERROR_SYSCALL

I am writing a messaging client that should connect to a server using websocket secure(WSS). When the client initiates nopoll connection, openssl returns SSL_ERROR_SYSCALL. The server also supports ...
5
votes
1answer
496 views

Is it worth using ModSecurity on a single entry point websocket connection?

I'm trying to evaluate benefits of using ModSecurity in our system. From that what I read till now, I have feeling it is not very useful for us. In our web app, there is single entry point, which is ...
4
votes
0answers
2k views

Authenticate JWT over websocket

I post here to know if my authentication mechanism over websocket is sound. My app API works over websocket instead of the standard HTTP rest. Each time a path that is secured is accessed over ...
0
votes
1answer
187 views

Understanding a proof of concept

I found this report about a buffer overflow vulnerability in websocify. I do not understand how this line $ curl http://example.com/$(python -c 'print "A"*5000') triggers the vulnerability. I think ...
2
votes
1answer
295 views

Getting and then distributing a wildcard SSL certificate — is this okay?

I have a stupid/crazy idea that I wanted to ask about here. It's probably not going to work, but I'm curious. Browser security won't allow insecure web sockets (ws://) from secure (https://) pages ...
0
votes
1answer
352 views

How to ensure if an SSH tunnling failed (if I haven't really tunneled)

I tunneled data transition as 22-22 and 2222-80, between my PC and VPS: ssh user@1.1.1.1 -L 22:localhost:22 -L 2222:localhost:80 -i ~/.ssh/key To make sure both tunnels were created, I executed lsof ...