Request Smuggling: WebSockets

In this room, we'll look at ways to smuggle requests through proxies by abusing WebSockets. 

Learning Objectives

• Understand how WebSockets work.
• Learn how to exploit HTTP request smuggling via WebSockets functionality.
• Use tools to detect/exploit said vulnerabilities.

Room Prerequisites

Before attempting this room, you must complete the HTTP Request Smuggling room. You must also be comfortable using proxies like Burp or ZAP.

Starting the VM

You will need to deploy the VM attached to this task by pressing the green Start Machine button at the top of the task. The machine will deploy all the required scenarios to complete the room. Each task that requires you to complete a practical element will point you to the URL of the web application you will need. You may access the VM using the AttackBox or your VPN connection.