Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Websockets API support

Jonathon | Last updated: Feb 24, 2017 07:20PM UTC

I'm running into wss more as we see the shift towards single page, media rich applications. As such, I often find the need to implement custom deserialization of binary websockets messages. It would be helpful if I could write Burp extensions to view and modify wss traffic. Any near-term plans for this?

PortSwigger Agent | Last updated: Feb 27, 2017 10:17AM UTC

This isn't in our near-term roadmap, sorry. We do plan to add API support for WebSockets at some point, but can't currently offer an ETA for the feature.

Burp User | Last updated: Apr 18, 2017 08:02AM UTC

+1 for this feature request (WebSockets API for Burp Extensions). With the massive use of websocket in modern webapps it's becoming every day more import.

PortSwigger Agent | Last updated: Apr 18, 2017 09:08AM UTC

Hi Pascal, Unfortunately there hasn't been further progress. WebSockets pose some difficulty for us, as the whole of Burp is heavily based on the "request / response" model which fits HTTP well but doesn't fit WebSockets. You're right, we could make some minor improvements, such as allowing copying. I guess small improvements like that have been on hold until we do the major work to support WebSockets properly. I've linked your comment to the development story; repeated user requests do help justify allocating development resource. Thanks for getting in touch.

Burp User | Last updated: Jun 26, 2017 04:02PM UTC

+1 WebSockets are spreading out more and more.

Burp User | Last updated: Sep 08, 2017 02:24AM UTC

+1x10^6

Burp User | Last updated: Oct 24, 2017 08:07PM UTC

I'm just checking in to see if you're any closer to adding API support for websockets. Other engineers in our group have been running into the same situation.

Burp User | Last updated: Mar 27, 2018 02:12PM UTC

Any news regarding this topic? I would have the same need. Also, I am curious why simple functionality like copying all websocket messages out of the websockets history is not included in Burp, which was, I guess, one of the first things that worked for the HTTP history.

Burp User | Last updated: Jun 11, 2018 10:23AM UTC

+1 for websocket support. (ekleyin artik götelekler.)

Burp User | Last updated: Jun 11, 2018 10:24AM UTC

-1 * 10^23 ( no need to websocket )

Burp User | Last updated: Jun 11, 2018 10:24AM UTC

+1x10^6 WebSockets are everywhere :(

Burp User | Last updated: Jun 11, 2018 10:27AM UTC

Hi Ege, Unfortunately there hasn’t been further progress. WebSockets pose some difficulty for us, as the whole of Burp is heavily based on the “request / response” model which fits HTTP well but doesn’t fit WebSockets. You’re right, we could make some minor improvements, such as allowing copying. I guess small improvements like that have been on hold until we do the major work to support WebSockets properly. I’ve linked your comment to the development story; repeated user requests do help justify allocating development resource. Thanks for getting in touch.

Burp User | Last updated: Jun 11, 2018 10:29AM UTC

+1 for websocket support.

PortSwigger Agent | Last updated: Jun 11, 2018 10:46AM UTC

In Burp 2 if you click on "View details" on a task, there is a tab for "Audit items" that shows the URLs that have been scanned.

Burp User | Last updated: Jun 29, 2018 08:23PM UTC

+1 Must have websockets

Burp User | Last updated: Jul 17, 2018 08:55AM UTC

GIMME WEBSOCKET TOOL i bet its because java

Burp User | Last updated: Sep 18, 2018 09:26AM UTC

Is any change to get websocket scanner util on burp SQLI etc it is hard to test with others. And 2.05 where is the scanned url , i can find scanned url 's on 2.0.5 dashboard.

Burp User | Last updated: Dec 20, 2018 08:49AM UTC

Please give us some kind of support for WebSockets. Even simply API access where we will have to handle everything on our own and write our own plugin. Please give us something...

Liam, PortSwigger Agent | Last updated: Dec 20, 2018 09:55AM UTC

We hope to have something to share with you by the end of June.

Burp User | Last updated: May 03, 2019 02:48PM UTC

+1 WebSockets are popping-up everywhere!

Burp User | Last updated: May 13, 2019 03:42PM UTC

+1 for WebSockets support

Kumar | Last updated: Dec 12, 2020 06:49AM UTC

+1

Ben, PortSwigger Agent | Last updated: Dec 14, 2020 09:26AM UTC

Hi Kumar, Just to clarify, what websocket support are you looking for?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.