Sitadel icon indicating copy to clipboard operation
Sitadel copied to clipboard

[Suggestion] Add Websocket Discovery & CSWSH

Open MC874 opened this issue 3 years ago • 0 comments

Introduction

Hi! Could you also add some Websocket Discovery and/or Cross Site Websocket Hijacking (CSWSH) for the tool? I have sorted subdomain list with your CDN and Server Module, it really helps alot. Altho, it would be great if this also could be added :)

Implementation

Input hostname list from a file, that will appended after ws scheme: ws://hostname.com

Required Scheme: wss:// or ws://

Required Header: Connection: Upgrade, Upgrade: websocket

Additional Header: Sec-Websocket-Version: 13, Sec-Websocket-Key: <dummy ws key>

The output result is HTTP Codes 101 Switch Protocol.

Background

The behind reason for this is; to find subdomain that support for websocket especially for Cloudflare region. Also, there is not many tool that provide this.

Thank you so much for your hard work that you put into this tool, so far this is my main daily tool to use 👌

MC874 avatar May 04 '22 03:05 MC874