Lab #1 Manipulating WebSocket messages to exploit vulnerabilities

In this video, we cover Lab #1 in the WebSockets Vulnerabilities module of the Web Security Academy. This online shop has a live chat feature implemented using WebSockets. Chat messages that you submit are viewed by a support agent in real time.

To solve the lab, use a WebSocket message to trigger an alert() popup in the support agent's browser.

▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬

Notes.txt document:

Web Security Academy Exercise Link:

Rana's Twitter account:

Complete and Continue