Web Socket Turbo Intruder
Summary: PortSwigger Research lists WebSocket Turbo Intruder, a Burp extension by Zakhar Fedotkin and Hannah L, at version 2.0.0, last updated 06 August 2025. The extension enables advanced fuzzing of WebSocket messages using custom Python code, with two integrated tools for launching scripted attacks or creating a middleware proxy for interacting with WebSocket connections via HTTP.
Key Takeaway: WebSocket traffic is a common blind spot for web defenses, and this tool puts scripted, Python-driven fuzzing of those connections in the hands of anyone running Burp, alongside a proxy that turns WebSocket sessions into HTTP for inspection.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026