碰到一个websocket的测试,而burp没有很好的支持websocket的repeater功能。
于是找到一个websocket测试工具:
WSSiP: A WebSocket Manipulation Proxy
https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2017/may/wssip-a-websocket-manipulation-proxy/
https://github.com/nccgroup/wssip
git clone https://github.com/nccgroup/wssip
# Change to the directory
cd wssip
# If you are developing for WSSiP:
# npm i
# If not... (as to minimize disk space):
npm i electron
npm i --production
# Start application:
npm start
由于需要启动图形界面,在linux server下没有成功:
在windows下启动成功: