websocket-attack

This list consists of posts and resources related to websocket attacks

https://footstep.ninja/posts/idor-via-websockets/

https://labs.detectify.com/2017/02/28/hacking-slack-using-postmessage-and-websocket-reconnect-to-steal-your-precious-token/

https://www.vulnano.com/2019/03/facebook-messenger-server-random-memory.html

https://hackerone.com/reports/395729

https://medium.com/@sharan.panegav/account-takeover-using-cross-site-websocket-hijacking-cswh-99cf9cea6c50

https://medium.com/@sharan.panegav/account-takeover-using-cross-site-websocket-hijacking-cswh-99cf9cea6c50

https://medium.com/@sharan.panegav/account-takeover-using-cross-site-websocket-hijacking-cswh-99cf9cea6c50

https://www.notsosecure.com/how-cross-site-websocket-hijacking-could-lead-to-full-session-compromise/