Questions tagged [websocket]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
42 views

How to ensure security in desktop application using WebSockets locally?

I am developing an application containing both Python backend and frontend using Electron. There is no authentication. The two components communicate through WebSocket. How should I prevent the third ...
0
votes
2answers
75 views

Hijacking Websocket - it is possible to change the server response?

i read every available hijacking websocket guide/explanation there is in the wild but i still don't understand one thing. In a CSWSH it is possible to custom requests to the server and retrieve ...
1
vote
1answer
76 views

Security in web sockets

Scope: penetration testing of web server with critical information in it (user management). I had an argument with my college about security in web sockets and I got stuck with him in one topic, ...
0
votes
1answer
190 views

How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

I've pentested a lot of websites and a few apps too but this app eludes them all. On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
2
votes
1answer
44 views

Websockets: Is it safe to allow tokens in url parameters?

For an API, I know that passing tokens in the url has the following security implications: They get saved in browser history They’re probably saved in your server’s logs and memory Users might post ...
1
vote
2answers
59 views

What are the best practices for naming backend-internal WebSocket endpoints?

In the backend I am currently working on I have a servlet (call it S) and a WebSocket endpoint (call it E). S needs to communicate with E, yet, as of now, any WebSocket client may connect to E. My ...
2
votes
0answers
56 views

Reverse TCP - Bind to a specific port

So, I'm trying to solve a CTF challenge that involves exploiting a remote service. The service doesn't check for the size of the input and there is a buffer overflow vulnerability. However, before I ...
1
vote
1answer
273 views

Is sql injection possible on this websocket?

I was testing a websocket when i found an add to cart request like the following ["{\"ITEMS\":{\"ITEM\":[{\"package_id\":\"123\",\"customer_type\":\"3\",\"qty\":1,\"}"] I tried to edit the value of ...
1
vote
1answer
225 views

How secure is Websocketd?

Is it secure enough for extremely sensitive information like used in banks? What kind of attack vectors and vulnerabilities does it have? Is the technology used making the contraption safe enough? ...
0
votes
0answers
25 views

How can I authenticate websocket over HTTP connection? [duplicate]

I have to communicate over HTTP connection only. A WebSocket server is setup in Tomcat. A web application is also running on the server. Now, I have a scenario in which a client will login into the ...
3
votes
1answer
336 views

Certificate Pinning for WebSockets

I have seen many implementations of certificate pinning for HTTPS connections originated from client-side apps running on mobile devices using native libraries and plugins. I would like to know ...
0
votes
0answers
39 views

Certificate Pinning with SockJS

What is the SockJS way of pinning SSL Certificates in the client side when contacting wss:// to avoid CA trust? FYI, when using modules like HTTPS or WS, we can listen to the socket event and then on ...
0
votes
1answer
330 views

Websocket connection hostname check

I am testing an application that uses both regular http rest requests and websockets. Burp cert is installed on the device I am using for the tests. I can intercept the encrypted traffic using Burp. ...
0
votes
1answer
1k views

Bypassing valid certificate requirement for websockets

I'm attempting to connect to a websocket server hosted in C# using SuperWebSockets from a page. The issue is that the websocket server generates a self-signed certificate making it difficult to ...
2
votes
1answer
435 views

Websocket Authentication at Opening Handshake Sufficient?

Suppose TLS is used and a session ID was negotiated using standard HTTP mechanisms. With the websocket opening handshake, this session ID is also transferred in the HTTP header. Suppose the websocket ...
0
votes
2answers
329 views

Websocket connection spoofing

I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically ...
2
votes
0answers
225 views

Using a GUID as an authentication token (and how it could be improved)

I'm implementing a Whatsapp Web-like feature for my Android application. User should be able to open an HTTPS web application that displays a QR code (a GUID generated by the server) and scan it using ...
1
vote
0answers
574 views

Is there a way to replay WebSocket messages? [closed]

Burp Suite can intercept WebSocket messages ("WebSockets history" under "Proxy" tab) but does not seem to be able to resend (at least not yet, according to this). I was wondering what techniques or ...
0
votes
1answer
50 views

What is a good way to authorize a client at a time to perform an action through websockets?

I am working on a round based web game where only one client/player at a time can perform an action. Throughout the game every player will have a websocket connection to the server. The client will ...
1
vote
1answer
974 views

Integrate PHP and WebSocket authentication securely

I have a PHP server that runs a website, and the website has features such as live notifications, which are basically notifications that get sent to you once a user likes or comments on one of your ...
2
votes
2answers
407 views

JS injected to database using img

How do we best prevent XSS scripted img / html element injected to our database? Recently I got a case in our website which is using PHP . Our website got a message service which allows HTML elements ...
3
votes
0answers
90 views

What are the design considerations behind exempting WebSockets from the SOP?

I was rather surprised that in my experiments, I could simply connect from one website to a WebSocket server on a different domain/port pair. Subsequent research repeatedly showed that WebSockets do ...
0
votes
1answer
108 views

What is a good way of embedding rsa encryption into a messaging app

I'm learning cryptography and stuck with a problem. Suppose I have a chat app that uses sockets. Before the massage is sent it's encripted with the RSA algorithm; what are some good strategies to ...
4
votes
1answer
855 views

Does fetch() of an https: resource verify certificate chain?

The fetch() spec doesn't deal with SSL/TLS since these are socket-level protocols. So I assume that it implements it's calls to lower level connection services to ensure that certificates are verified ...
2
votes
0answers
169 views

HTTPS basic auth protected AJAX Token

I have a website (https) that has basic auth enabled for /token subdir I have websocket ws going through Nginx to become wss I want to create a bi-directional api on the websocket so that end users ...
0
votes
1answer
81 views

Encrypt a file in the server and decrypt it in the client without risking the user accessing it?

How can I send an encrypted file from a server to a client, encrypt and use it in the client without risking the user to access it? I saw an answer where the server saved a file in its memory, and ...
4
votes
1answer
356 views

Is it possible to verify a socket connection is coming from a particular web page?

Suppose you implement a streaming api based on websockets at stream.myapp.com. One of the consumers of this api is your website myapp.com. My question is whether stream.myapp.com can verify ...
4
votes
1answer
379 views

Security implications of allowing websites to open TCP sockets

I was reading a post about tcp sockets in the browser here and one of the mentioned reasons for not allowing it is that allowing websites to open TCP sockets would be a security risk but doesn't ...
5
votes
1answer
9k views

Why can't websockets support custom headers?

This question is related to this question I asked To summarise, I'm playing with websockets at the moment and I'm trying to understand how to authenticate a client connecting to the server using a ...
1
vote
1answer
2k views

If I use a Python socket over localhost, are there security concerns I need to be aware of?

I am implementing a simple socket in Python to pass data back and forth between two scripts running on the same machine (unfortunately, a socket is the only possible setup for my situation). This ...
2
votes
1answer
1k views

Is it secure to rely on websocket connection?

In a client-server communication scenario over secure websocket, client is authorized securely and from there on, I have two choices: Assign a unique random ID (session) and check that on subsequent ...
1
vote
0answers
34 views

WSS assign login token on socket?

Is it secure to assign the login token on the socket object? This would be done to avoid having to consistently send their tokens over an encrypted established WebSocket connection. The token would be ...
1
vote
0answers
257 views

Check if a Websocket connection origins from a Chrome extension [closed]

I am writing an application that communicates with a Chrome extension via websocket connection. I wonder if there is a way to detect whether the connection actually origins from the extension. The ...
2
votes
2answers
179 views

Integrity of secure WebSocket

I'm using a secure WebSocket connection (wss://...) for data transfer to and from a single-page app. Once a client has been authenticated, should I be passing some sort of authentication token with ...
0
votes
1answer
87 views

RFC 6455: Form fields with starting |Sec-| mean?

In RFC 6455 which is the Websocket Protocol specification it says: It is similarly intended to fail to establish a connection when data from other protocols, especially HTTP, is sent to a ...
0
votes
1answer
354 views

Measures to secure websockets for non-browser clients

I've been looking into the security risks that needed to be addressed when setting up an application using websockets, but the major issues I've looked at (CSRF, XSS, cross-site websocket hijacking) ...
1
vote
1answer
991 views

Secure JSON on websocket - encryption

I have an websocket connection without SSL certificate (just plain WS, not WSS). Every message is transferred as JSON (text). What might be best way to secure communication? Which encryption ...
4
votes
3answers
4k views

Do websockets represent a security problem to my local machine?

To work around a problem with IntelliJ, I have been recommended to configure my local Docker daemon to work on port 2375 without TLS authentication. I am concerned however that a malicious website ...
1
vote
1answer
1k views

Why can't I send raw HTTP requests with arbitrary headers from a web application? [closed]

I am trying to write a script to test a Suricata network signature. To do this I need to simulate the same user agent as the malware. I tried the following. $.ajaxSetup({ beforeSend: function(...
0
votes
1answer
595 views

websocket connection over TLS using nopoll fails with SSL_ERROR_SYSCALL

I am writing a messaging client that should connect to a server using websocket secure(WSS). When the client initiates nopoll connection, openssl returns SSL_ERROR_SYSCALL. The server also supports ...
5
votes
1answer
473 views

Is it worth using ModSecurity on a single entry point websocket connection?

I'm trying to evaluate benefits of using ModSecurity in our system. From that what I read till now, I have feeling it is not very useful for us. In our web app, there is single entry point, which is ...
4
votes
0answers
2k views

Authenticate JWT over websocket

I post here to know if my authentication mechanism over websocket is sound. My app API works over websocket instead of the standard HTTP rest. Each time a path that is secured is accessed over ...
0
votes
1answer
186 views

Understanding a proof of concept

I found this report about a buffer overflow vulnerability in websocify. I do not understand how this line $ curl http://example.com/$(python -c 'print "A"*5000') triggers the vulnerability. I think ...
2
votes
1answer
279 views

Getting and then distributing a wildcard SSL certificate — is this okay?

I have a stupid/crazy idea that I wanted to ask about here. It's probably not going to work, but I'm curious. Browser security won't allow insecure web sockets (ws://) from secure (https://) pages ...
0
votes
1answer
346 views

How to ensure if an SSH tunnling failed (if I haven't really tunneled)

I tunneled data transition as 22-22 and 2222-80, between my PC and VPS: ssh user@1.1.1.1 -L 22:localhost:22 -L 2222:localhost:80 -i ~/.ssh/key To make sure both tunnels were created, I executed lsof ...
4
votes
3answers
2k views

Authentication without login and password in mobile apps

I'm getting started in app development and I'm thinking about the login flow of first app. Some other apps like Whatsapp and Clash of Clans does not require any sign up or login process in order to ...
2
votes
0answers
800 views

SignalR authentication security

I would like to ask a question about security in the case of SignalR, a library for real-time HTTP communication. I see it as an abstraction layer for web-sockets with fall-back mechanisms in case the ...
7
votes
2answers
648 views

Vulnerable web sockets application for training

WebSockets have some potential new vulnerabilities, such as Cross-Site WebSocket Hijacking. Is there a vulnerable app (like Damn Vulnerable Web App, HackMeBank) that demonstrates WebSocket ...
4
votes
1answer
66 views

Mixing Off-The-Record and classic SSL

I am developing some pubsub system on top of Node.js and Socket.io. I decided to implement Off-The-Record (OTR) encryption by default for all of data transfers between clients and server(s). Question ...
1
vote
2answers
1k views

Implications of replacing Java Applets with Client Side Websocket Server

I am no security expert, but do know some concepts. We have a web application which currently uses Java Applets to do some operations on files in Client's File system (Browse, create, upload and ...