https://panman4040.github.io/training/portswigger/websocket/Recent content in WebSockets on an's security blogHugoenWed, 15 Jul 2026 08:36:00 +0700https://panman4040.github.io/training/portswigger/websocket/ws_practitioner1/Fri, 03 Jul 2026 15:39:16 +0800https://panman4040.github.io/training/portswigger/websocket/ws_practitioner1/<p>Since the only useful functionality on the lab is the live chat feature, we will be trying out payloads on it, but this proved much harder than I thought (lol).</p> <p>After sending the WebSocket message to Repeater and crafting a simple <code>alert</code> payload, we are immediately IP banned with no room to spare (damn). <img src="https://panman4040.github.io/images/301b9b8d-fd58-4c94-83bb-a5d4d52610e9.jpg" alt=""> Upon inspection of the WebSocket history, we should see that the server detects our payload as an attack and acts accordingly: <img src="https://panman4040.github.io/images/2feb5ab7-2051-4c54-a515-25006951804d.jpg" alt=""></p>