Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

Accessing websocket messages

Phil | Last updated: May 17, 2023 05:43PM UTC

Is it possible to access websocket messages? I can use proxylistener to get the HTTP request but not the actual websocket messages. If possible are there any basic proof-of-concepts out there in python? TIA.

Hannah, PortSwigger Agent | Last updated: May 18, 2023 02:11PM UTC

Hi You can do this with the new Montoya API. You can find this here: https://portswigger.github.io/burp-extensions-montoya-api/javadoc/burp/api/montoya/websocket/WebSockets.html Unfortunately, Montoya API extensions need to be written in Java rather than Python. You can find our getting started guide for the Montoya API here: https://portswigger.net/burp/documentation/desktop/extensions/creating You can find an example extension for handling WebSockets here: https://github.com/PortSwigger/burp-extensions-montoya-api-examples/tree/main/websockethandler

Phil | Last updated: May 18, 2023 02:53PM UTC

Awesome, thanks for the help!

You need to Log in to post a reply. Or register here, for free.