In this video, we cover Lab #1 in the WebSockets Vulnerabilities module of the Web Security Academy. This online shop has a live chat feature implemented using WebSockets. Chat messages that you submit are viewed by a support agent in real time.

To solve the lab, use a WebSocket message to trigger an alert() popup in the support agent's browser.

▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬

Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/websockets-vulnerabilities/lab-01/notes.txt

Web Security Academy Exercise Link: https://portswigger.net/web-security/websockets/lab-manipulating-messages-to-exploit-vulnerabilities

Rana's Twitter account: https://twitter.com/rana__khalil