ROT HACKERSACADEMYStart learning
Courses07 / REALTIME DEPTH

WebSocket Engineering

Go beyond room checks into connection controls, interception, scanners, binary protocols, session security, subscriptions, and recovery behavior.

Advanced7-9 hours6 lessons6 guided labs
Begin lesson 01 ↗
COURSE SYLLABUS

Do the work in order.

  1. 01
    60 min

    Configure WebSocket connections

    Build a reproducible upgrade request with identity, origin, cookies, headers, TLS, and subprotocol decisions.

  2. 02
    65 min

    Capture, intercept, edit, drop, forward, and replay

    Operate the realtime message pipeline while preserving original and modified frames.

  3. 03
    70 min

    Run the WebSocket scanner and Smart Payload Evolution

    Apply WSHawk's scanner catalogue to a marked JSON field and review every mutation.

  4. 04
    65 min

    Analyze binary protocols

    Capture binary frames, inspect magic bytes and hashes, and form a codec hypothesis without pretending bytes are text.

  5. 05
    70 min

    Test GraphQL and WebSocket authorization together

    Apply stored identities and authorization policies to queries, subscriptions, channels, tenant fields, and event replay.

  6. 06
    75 min

    Test token reuse, fixation, impersonation, and privilege boundaries

    Run the WSHawk session tests and separate authentication state failures from message authorization.