Manipulating Web Socket handshakes with Burp Suite - Port Swigger
Summary: PortSwigger published a tutorial on manipulating WebSocket handshakes in Burp Suite, showing how to clone, modify, and resend the HTTP message that establishes a WebSocket connection using Burp Repeater. The tutorial walks through sending a message from Proxy's WebSockets history to Repeater, cloning the connection, amending the Host, Port, and HTTPS settings and the request body, then attaching the new connection so Repeater uses it for all messages in the open tab.
Key Takeaway: The tutorial notes that adding an X-Forwarded-For header to a handshake can spoof your IP address and get around restrictions on your actual IP - a reminder that controls keyed to IP address may not hold once an attacker can rewrite the handshake.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026