# Lab #1: Manipulating WebSocket messages to exploit vulnerabilities

Inicialmente dejamos apagado la intercepción:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FlhDZ7iVaP38OWfmfQAcb%2Fimage.png?alt=media&#x26;token=1d603e7c-63b1-4242-908a-eec034e1e781" alt=""><figcaption></figcaption></figure>

Luego nos dirigimos a `live chat`&#x20;

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2Fw6n15S4QCn3jl2dfSo79%2Fimage.png?alt=media&#x26;token=e52e8678-46aa-4ff9-8795-8584f47c035e" alt=""><figcaption></figcaption></figure>

Y luego de acceder a live chat, se genera trafico utilizando websockets:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FBAieHIh0X4syums4AhEK%2Fimage.png?alt=media&#x26;token=16684ffc-e3f6-41a5-a9bc-b72074d1c2db" alt=""><figcaption></figcaption></figure>

Luego simplemente localizamos una peticion to server y la enviamos al repeater para posteriormente enviar una carga maliciosa de XSS:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FiB6UOLFxi6qR0Vdr4Eh4%2Fimage.png?alt=media&#x26;token=4e58512f-d5ca-4c42-94fa-41269a3acd06" alt=""><figcaption></figcaption></figure>

Luego de enviar la carga previa podemos apreciar el despliegue de la alerta:<br>

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2F8rGXv9a9fCmQJhhe4BZH%2Fimage.png?alt=media&#x26;token=41d0c7b9-c3b4-4267-b739-387fb7d1145e" alt=""><figcaption></figcaption></figure>

Lo anterior, es debido a que los mensajes se cargan en el DOM del HTML:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FwVKajPWhqBvYg3T1nFQA%2Fimage.png?alt=media&#x26;token=88b529e6-4d73-4c01-b67d-515bd47bd5bb" alt=""><figcaption></figcaption></figure>