[nuclei-template] detect-websocket

[emanueldosreis]

id: detect-websocket

info:
name: WebSocket Detection (Raw HTTP/1.1)
author: Emanuel Rodrigues
severity: info
description: Detects WebSocket endpoints using a raw HTTP/1.1 upgrade request.

requests:

• raw:

  • |
    GET {{BaseURL}} HTTP/1.1
    Host: {{Hostname}}
    Upgrade: websocket
    Connection: Upgrade
    Sec-WebSocket-Version: 13
    Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==

  matchers:

  • type: word
    words:

    • "101 Switching Protocols"
      part: response

  • type: word
    words:

    • "websocket"
      part: response