Cyber Risks · PortSwigger Research

Filtering the Web Sockets history - Port Swigger

Summary: PortSwigger's Burp Suite documentation describes how to filter the WebSockets history in Burp, using a filter window with Settings mode and Script mode tabs. Filters only control what is displayed, so hidden items are not deleted and reappear when the filter is reset.

What you should know: WebSocket traffic is where a lot of session and token activity now lives, and the tooling note here is that filtering is a display layer only - hidden items stay in the history, so a filtered view is not a clean one.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related