Working with Web Socket messages in Burp Repeater - Port Swigger
Summary: PortSwigger's documentation describes how Burp Repeater can manipulate and resend individual WebSocket messages and analyze the application's responses. Each Repeater tab holds the WebSocket connection used to send the message, set automatically when a message is sent to Repeater, plus a sortable history table of all messages sent and received, with manually generated messages marked.
Key Takeaway: WebSocket traffic carries data inside a persistent connection that many security teams test far less than standard HTTP requests, and the option to send a message to the client only works on connections still open through Burp Proxy.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026