Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: Cross-site WebSocket hijacking - Solution doesn't work

David | Last updated: Apr 22, 2022 10:37AM UTC

Hi all! Having some issues with Lab: Cross-site WebSocket hijacking, I'm using Burp Pro, I followed the solution provided and I get HTTP/DNS polling back from my local machine when I use the javascript CSRF payload that includes my WebSocket chat history, which confirms the CSRF is working However, when I hit "Deliver exploit to victim" I'm getting nothing back I'm not above thinking that it might be human error on my part, but I am 99% sure it is an issue with the lab - has anyone else had this problem lately? Thanks! David

David | Last updated: Apr 22, 2022 01:28PM UTC

Went back to the lab later in the day, used the same payload and it worked this time - no idea what was up! Just wanted to make sure I wasn't wasting anyones time replying - cheers anyway!

Lucas | Last updated: Sep 22, 2024 02:16PM UTC