ROT HACKERSACADEMYStart learning
Courses/WSHawk Practitioner/Lesson 05
01.05 / 45 min

Connect, capture, and replay WebSockets

Connect to the lab WebSocket, inspect frames, and replay a room subscription under stored identities.

By the endCreate an authenticated WS connectionSend text framesReplay a message under another identity
Controlled exercise

Use only the Academy Lab on 127.0.0.1:5177. Do not copy these tests to a public system without explicit written authorization.

01

Open WS Forge

Choose Advanced → WS Forge, set the lab URL, select User A, and connect. The first server frame should identify user_a.

ws://127.0.0.1:5177/ws
Expected result

{"type":"connected","authenticated":true,"identity":"user_a"}

02

Send a harmless frame

Send the ping action first so transport and serialization are proven before authorization testing.

{"action":"ping","data":"academy"}
Expected result

A pong frame returns academy.

03

Replay a secure subscription

Send the secure User B room subscription as User A, then replay the same frame under User B.

{"action":"subscribe","room":"user_b","mode":"secure"}
Expected result

User A is denied; User B is subscribed.

MASTERY CHECKPOINT

Prove it before moving on.

The frame timeline shows the same request with two identity-specific outcomes.