A Security Tool for Enumerating WebSockets

Last update: Jan 01, 2023

Overview

STEWS: Security Testing and Enumeration of WebSockets

STEWS is a tool suite for security testing of WebSockets

This research was first presented at OWASP Global AppSec US 2021

Features

STEWS provides the ability to:

Discover: find WebSockets endpoints on the web by testing a list of domains
Fingerprint: determine what WebSockets server is running on the endpoint
Vulnerability Detection: test whether the WebSockets server is vulnerable to a known WebSockets vulnerability

The included whitepaper in this repository provides further details of the research undertaken. The included slide deck was presented at OWASP AppSec US 2021.

Complementary respositories created as part of this research include:

The Awesome WebSocket Security repository, which compiles WebSockets security information for future researchers
The WebSockets-Playground repository, which is a script to easily jump start multiple local WebSocket servers in parallel

Installation & Usage

Each portion of STEWS (discovery, fingerprinting, vulnerability detection) has separate instructions. Please see the README in each respective folder.

Why this tool?

WebSocket servers have been largely ignored in security circles. This is partially due to three hurdles that have not been clearly addressed for WebSocket endpoints:

Discovery
Enumeration/fingerprinting
Vulnerability detecting

STEWS attempts to address these three points. A custom tool was required because there is a distinct lack of support for manually configured WebSocket testing in current security testing tools:

There is a general lack of supported and scriptable WebSocket security testing tools (for example, NCC's unsupported wssip tool, nuclei's lack of WebSocket support, and nmap's lack of WebSocket support)
Burp Suite lacks support for WebSocket extensions (for example, see this PortSwigger forum thread and this one).
There is a lack of deeper WebSocket-specific security research (the Awesome WebSocket Security repository lists published WebSockets security research)
The proliferation of WebSockets around the modern web (as seen in the results of the STEWS discovery tool)

A CLI tool to disable and enable security standards controls in AWS Security Hub

Security Hub Controls CLI A CLI tool to disable and enable security standards controls in AWS Security Hub. It is designed to work together with AWS S

4 Nov 14, 2022

Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe. https://github.com/adobe

Welcome to HubbleStack!! You can find the docs here You can file an issue here Follow us on Twitter! Development Below are sample instructions to setu

368 Jan 4, 2023

A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources to make Ubuntu 20.04 capable of both offensive and defensive security work.

infosec-fortress A python script to turn Ubuntu Desktop into a strong DFIR/RE System with some teeth (Purple Team Ops)! This is intended to create a s

41 Dec 30, 2022

Security-TXT is a python package for retrieving, parsing and manipulating security.txt files.

3 Feb 7, 2022

Security audit Python project dependencies against security advisory databases.

52 Dec 17, 2022

RedTeam-Security - In this repo you will get the information of Red Team Security related links

OSINT Passive Discovery Amass - https://github.com/OWASP/Amass (Attack Surface M

5 May 18, 2022

An improbable web debugger through WebSockets

wdb - Web Debugger Description wdb is a full featured web debugger based on a client-server architecture. The wdb server which is responsible of manag

1.6k Dec 9, 2022

Elegant WebSockets for your Flask apps.

Flask-Sockets Elegant WebSockets for your Flask apps. Simple usage of route decorator: from flask import Flask from flask_sockets import Sockets app

1.7k Dec 26, 2022

An improbable web debugger through WebSockets

wdb - Web Debugger Description wdb is a full featured web debugger based on a client-server architecture. The wdb server which is responsible of manag

1.6k Dec 9, 2022

SSH to WebSockets Bridge

wssh wssh is a SSH to WebSockets Bridge that lets you invoke a remote shell using nothing but HTTP. The client connecting to wssh doesn't need to spea

1.3k Dec 25, 2022

Chat app for Django, powered by Django Channels, Websockets & Asyncio

Django Private Chat2 New and improved https://github.com/Bearle/django-private-chat Chat app for Django, powered by Django Channels, Websockets & Asyn

205 Dec 30, 2022

🚀 An asynchronous python API wrapper meant to replace discord.py - Snappy discord api wrapper written with aiohttp & websockets

Pincer An asynchronous python API wrapper meant to replace discord.py ❗ The package is currently within the planning phase 📌 Links ｜Join the discord

125 Dec 26, 2022

WebSocket implementation in Python built on top of websockets python library. Similar to Node.js's ws.

ws WebSocket implementation in Python built on top of websockets python library. Similar to Node.js's ws. Basic usage. server.py import ws server = w

7 Jun 27, 2022

Library for easily creating and managing websockets.

Documentation coming in version 0.1.4 GitHub PyPI Discord Features Easy to use with object oriented syntax. Intellisense support with typehints and do

0 Aug 27, 2022

Connects microservices through a mesh of websockets

WebMesh WebMesh is a WebSocket based communication library for microservices. It uses a WebSocket server based on wsproto that distributes clients on

9 Apr 29, 2022

Client library for relay - a service for relaying server side messages to the client side browsers via websockets.

1 Nov 10, 2021

An IPC based on Websockets, fast, stable, and reliable

winerp An IPC based on Websockets. Fast, Stable, and easy-to-use, for inter-communication between your processes or discord.py bots. Key Features Fast

5 Aug 9, 2022

Vulnerability Scanner & Auto Exploiter You can use this tool to check the security by finding the vulnerability in your website or you can use this tool to Get Shells

About create a target list or select one target, scans then exploits, done! Vulnnr is a Vulnerability Scanner & Auto Exploiter You can use this tool t

108 Dec 4, 2021

Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).

Welcome to Corsair_scan Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS) misconfigurations. CORS is a mechanism that allow

116 Nov 9, 2022

Comments

CSWSH ORIGIN BYPASS DETECTED ?

Hi,

In case, I get

CSWSH ORIGIN BYPASS DETECTED: wss://REDACTED.com/ws vanilla CSWSH didn't work, but server origin check was bypassed (unescaped period).

Does that mean CSWSH is still possible ?? if so, how to set the Origin header to REDACTEDAcom ?

Thank you in davance

opened by Sim4n6 2

Releases(1.0.0)

1.0.0(Nov 22, 2021)

First release
Source code(tar.gz)
Source code(zip)

A Security Tool for Enumerating WebSockets

Related tags

Overview

STEWS: Security Testing and Enumeration of WebSockets

Features

Installation & Usage

WebSocket Discovery

WebSocket Fingerprinting

WebSocket Vulnerability Detection

Why this tool?

You might also like...

A CLI tool to disable and enable security standards controls in AWS Security Hub

Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe. https://github.com/adobe

A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources to make Ubuntu 20.04 capable of both offensive and defensive security work.

Security-TXT is a python package for retrieving, parsing and manipulating security.txt files.

Security audit Python project dependencies against security advisory databases.

RedTeam-Security - In this repo you will get the information of Red Team Security related links

An improbable web debugger through WebSockets

Elegant WebSockets for your Flask apps.

An improbable web debugger through WebSockets

SSH to WebSockets Bridge

Chat app for Django, powered by Django Channels, Websockets & Asyncio

🚀 An asynchronous python API wrapper meant to replace discord.py - Snappy discord api wrapper written with aiohttp & websockets

WebSocket implementation in Python built on top of websockets python library. Similar to Node.js's ws.

Library for easily creating and managing websockets.

Connects microservices through a mesh of websockets

Client library for relay - a service for relaying server side messages to the client side browsers via websockets.

An IPC based on Websockets, fast, stable, and reliable

Vulnerability Scanner & Auto Exploiter You can use this tool to check the security by finding the vulnerability in your website or you can use this tool to Get Shells

Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).

Comments

CSWSH ORIGIN BYPASS DETECTED ?

Releases(1.0.0)

1.0.0(Nov 22, 2021)

Owner

alien.py - Python interface to websocket endpoint of ALICE Grid Services

image stream publish server over websocket

Developer-friendly asynchrony for Django

Burgeramt-appointments-websockets - Fetch Bürgeramt appointments and broadcast them via websockets

tiny multi-threaded socks4 server implemented in python2

Tetri5 - Multiplayer Websocket Backend

WebSocket implementation in Python built on top of websockets python library. Similar to Node.js's ws.

AWS API Gateway Websocket Asynchronous Notifications Pusher

Library for easily creating and managing websockets.

Discord.py Connect to Discord voice call with websocket

SocketIO 转发台，保持 botoy 能力和插件功能的同时，透传其接口，以此使用更灵活、生态更好的技术进行开发

Get realtime updates in your mobile/web app from frappe and erpnext

Socket.IO integration for Flask applications.

Chat app for Django, powered by Django Channels, Websockets & Asyncio

Whatsapp Clone using django, django-channels and websocket

This websocket program is for data transmission between server and client. Data transmission is for Federated Learning in Edge computing environment.

一款为 go-cqhttp 的正向 WebSocket 设计的 Python SDK

Websocket 'broadcast' demo using FastAPI/Starlette

Django Channels HTTP/WebSocket server

A websocket client for Source Filmmaker intended to trasmit scene and frame data to other applications.