#websocket

8 pages tagged with "websocket"

infosec

chunkloris: gorilla/websocket — WebSocket text frames. gorilla/websocket v1.5.3 on go 1.23. verdict: batches correctly.
chunkloris: Kestrel ASP.NET Core WebSockets — WebSocket text frames. Kestrel ASP.NET Core WebSockets ASP.NET Core 9.0 (mcr.microsoft.com/dotnet/aspnet:9.0); Microsoft.AspNetCore.WebSockets. verdict: batches correctly.
chunkloris: per-chunk http amplification — cross-ecosystem measurement of per-chunk / per-frame cpu cost in production http/1, http/2, http/3, and websocket servers under one-byte-per-chunk request bodies
chunkloris: tokio-tungstenite — WebSocket text frames. tokio-tungstenite 0.24 on rust 1.83. verdict: batches correctly.
chunkloris: uvicorn (websockets impl) — WebSocket text frames. uvicorn (websockets impl) uvicorn 0.32.1, websockets 13.1, starlette 0.41.3. verdict: vulnerable per frame.
chunkloris: uvicorn (wsproto impl) — WebSocket text frames. uvicorn (wsproto impl) uvicorn 0.32.1, wsproto 1.2.0, starlette 0.41.3. verdict: vulnerable per frame.
chunkloris: ws (Node) — WebSocket text frames. ws (Node) ws 8.18.0 on node 22-slim. verdict: batches correctly.
websocket tunneling — high-performance covert channels using websocket protocol