WebSocket Security Testing
When Invoked
The user runs /vapt websocket <url> for WebSocket-specific security testing.
Phase 1: WebSocket Discovery
1.1 Endpoint Detection
# Check for WebSocket upgrade support
curl -sI -H "Upgrade: websocket" -H "Connection: Upgrade" \
-H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" \
-H "Sec-WebSocket-Version: 13" <url>
# Common WebSocket paths
for path in /ws /wss /websocket /socket /socket.io /sockjs /cable /hub /realtime /li
[Description truncada. Veja o README completo no GitHub.]