[hybi] WG: WebSockets in Penetration Testing

Tobias Oberstein <tobias.oberstein@tavendo.de> Thu, 23 May 2013 08:29 UTC

Return-Path: <tobias.oberstein@tavendo.de>
X-Original-To: hybi@ietfa.amsl.com
Delivered-To: hybi@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2710921F96A6 for <hybi@ietfa.amsl.com>; Thu, 23 May 2013 01:29:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DcVt05FHAS9k for <hybi@ietfa.amsl.com>; Thu, 23 May 2013 01:29:15 -0700 (PDT)
Received: from EXHUB020-2.exch020.serverdata.net (exhub020-2.exch020.serverdata.net [206.225.164.29]) by ietfa.amsl.com (Postfix) with ESMTP id 55AFF21F93FC for <hybi@ietf.org>; Thu, 23 May 2013 01:29:15 -0700 (PDT)
Received: from EXVMBX020-12.exch020.serverdata.net ([169.254.3.33]) by EXHUB020-2.exch020.serverdata.net ([206.225.164.29]) with mapi; Thu, 23 May 2013 01:29:14 -0700
From: Tobias Oberstein <tobias.oberstein@tavendo.de>
To: "hybi@ietf.org" <hybi@ietf.org>
Date: Thu, 23 May 2013 01:29:12 -0700
Thread-Topic: WebSockets in Penetration Testing
Thread-Index: Ac5Xj5p3fZ4vuhWOQBqINOGZg8sc5Q==
Message-ID: <634914A010D0B943A035D226786325D4422C3D9D7B@EXVMBX020-12.exch020.serverdata.net>
References: <519DBB9C.3010400@loggia.at>
In-Reply-To: <519DBB9C.3010400@loggia.at>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: de-DE, en-US
Content-Type: multipart/alternative; boundary="_000_634914A010D0B943A035D226786325D4422C3D9D7BEXVMBX02012ex_"
MIME-Version: 1.0
Cc: Robert Koch <robert.koch@loggia.at>, "autobahnws@googlegroups.com" <autobahnws@googlegroups.com>
Subject: [hybi] WG: WebSockets in Penetration Testing
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 May 2013 08:29:20 -0000

RT for protocol testing nerds: a master thesis and GSoC project about WS penetration testing.

There is also an interesting chapter about WS usage and adoption in Android apps ..


Von: Robert Koch [mailto:robert.koch@loggia.at]
Gesendet: Donnerstag, 23. Mai 2013 08:48
An: tobias.oberstein@gmail.com
Betreff: WebSockets in Penetration Testing

Hello Tobias,

my master's thesis is now available online:

 *   Info-Page: http://permalink.obvsg.at/AC07815487
 *   PDF: http://media.obvsg.at/p-AC07815487-2001
Feel free to share it as you like. Thanks for helping me out to understand the term "TCP-clean". My master's thesis is based on my Google Summer of Code Project 2012 (http://code.google.com/p/zaproxy/).

Best wishes,
Robert