Awesome GitHub RepositoriesWebSocket Security

The OWASP Cheat Sheet Series is a comprehensive, community-driven repository of concise security best practices and defensive coding patterns. It serves as a centralized knowledge base for developers and security professionals, providing actionable guidance to secure applications across the entire software development lifecycle. The project covers a vast array of security domains, ranging from fundamental web application hardening and authentication protocols to specialized controls for modern infrastructure and artificial intelligence systems. What distinguishes this project is its decentral

NATS Server is a high-performance, lightweight messaging system designed for cloud-native applications, edge computing, and distributed microservices. It functions as a distributed publish-subscribe broker that routes messages using hierarchical, dot-separated subject strings, enabling decoupled communication between services without requiring centralized broker lookups. The system supports core messaging patterns including asynchronous publish-subscribe, request-reply, and load-balanced queue processing. The platform distinguishes itself through a decentralized architecture that eliminates t

Elysia is a high-performance TypeScript web framework designed for building type-safe backend services. It provides a modular, plugin-based architecture that allows developers to compose server logic, middleware, and validation schemas into scalable application instances. By leveraging native web standards, the framework ensures portability across diverse JavaScript runtimes, including Node.js, Deno, and various edge computing environments. The framework distinguishes itself through its focus on end-to-end type safety, automatically synchronizing request and response definitions between the s

This is a header-only C++ library that provides implementations for HTTP clients, HTTP servers, and a WebSocket framework. It allows for the creation of network services and the consumption of remote APIs without requiring a separate compilation step or external binary linking. The project features backend-agnostic TLS integration for secure HTTPS and WSS communication and employs a thread-pool model to process concurrent requests. It distinguishes itself with a full-duplex WebSocket state-machine and a middleware-based request pipeline that supports regular-expression path routing. The libr

Java-WebSocket is a collection of classes for implementing WebSocket clients and servers using pure Java. It provides a framework for hosting servers that manage connections via event-driven subclasses and tools for establishing client connections to remote servers. The library includes a secure communication tool for encrypting traffic using the WSS protocol and a compression library that uses per-message deflate extensions to reduce transmitted data size. It supports the configuration of cipher suites to limit encryption protocols and ensure compatible communication. The project enables bi

gqlgen is a schema-first Go library designed to build type-safe GraphQL servers. It functions as a code generation engine that transforms declarative GraphQL schema definitions into strongly-typed Go source code, ensuring strict alignment between the API contract and the underlying implementation. The framework distinguishes itself through its deep integration with the Go type system and its highly extensible build pipeline. By using schema-first development, it automates the creation of server boilerplate and resolver stubs, allowing developers to map schema fields directly to Go structs and

SocketRocket is an Objective-C WebSocket client library designed to establish bidirectional real-time communication channels between an application and a server. It provides a networking layer for real-time data streaming, utilizing a heartbeat monitor to maintain the stability of active network streams. The library is built to operate across restricted networks by routing traffic through HTTP proxies. It secures data transmission using TLS encryption and SSL certificate pinning to prevent unauthorized interception of network traffic. Its underlying capabilities include low-level TCP socket

Starscream is a Swift WebSocket client library that provides a concrete implementation of the WebSocket protocol for iOS and macOS applications. It functions as an event-driven wrapper for establishing and managing bidirectional connections to send and receive text and binary frames over TCP. The library includes a secure WebSocket client capable of encrypting traffic and validating server identities. It manages the full connection lifecycle, from the initial handshake and header exchange to session termination with custom close codes. The project covers a broad range of networking capabilit

Websocat is a specialized set of command-line tools for WebSocket communication, acting as a client, server, and stream processor. It provides a terminal-based interface for connecting to WebSocket servers, hosting secure WebSocket servers, and bridging data between WebSockets and other network transports. The project distinguishes itself by functioning as a bidirectional network relay, allowing the routing of data between WebSocket streams, TCP sockets, UNIX sockets, and standard system input and output. It includes specialized implementations for SOCKS5 and HTTP proxying, as well as a strea

Javalin is a lightweight web framework for Java and Kotlin designed for building REST APIs and web applications. It functions as an embedded Jetty web server, allowing applications to run as standalone processes without the need for an external servlet container. The project provides specialized frameworks for diverse communication patterns, including a REST API framework with automatic OpenAPI schema generation, a GraphQL API framework with query and mutation resolvers, and a WebSocket server for bidirectional real-time communication. It also includes a dedicated framework for pushing real-t

netty-socketio is a Java implementation of a Socket.IO server designed for real-time bidirectional communication between clients and servers. It functions as a real-time event engine and WebSocket communication server, utilizing the Netty network framework to manage high-performance socket connections. The project enables distributed socket server scaling by acting as a distributed message broker. It synchronizes client states and broadcasts messages across multiple server nodes through the use of an external data store. The system manages traffic via namespace-based connection routing and r

Proxyman is a cross-platform HTTP debugging proxy that captures, inspects, and modifies HTTP, HTTPS, and WebSocket traffic. It functions as a man-in-the-middle proxy, decrypting SSL/TLS traffic to allow real-time inspection and modification of encrypted requests and responses. The tool is designed for debugging web and mobile applications, with capabilities for API mocking and simulation, scriptable traffic modification, and team collaboration on network logs. What distinguishes Proxyman is its deep integration with mobile and cross-platform development workflows. It provides automated certif

websocket-sharp es una implementación en C# de la librería del protocolo WebSocket utilizada para crear aplicaciones cliente y servidor bidireccionales. Permite el intercambio de datos en tiempo real entre endpoints mediante conexiones persistentes. La librería proporciona capacidades de red especializadas, incluyendo redes cifradas SSL para transporte seguro y validación de certificados. También cuenta con túneles proxy HTTP para enrutar tráfico a través de servidores intermediarios utilizando autenticación básica o digest. El proyecto cubre una amplia gama de capacidades, incluyendo la implementación de clientes y servidores WebSocket, enrutamiento de servicios basado en rutas y la capacidad de transmitir mensajes a múltiples clientes. Incluye soporte para gestionar metadatos de handshake y compresión de carga útil para reducir el tamaño de la transferencia de datos.

Suricata is an open-source network intrusion detection and prevention engine that analyzes live network traffic in real-time to identify and alert on malicious activity. It operates as a rule-based threat detection system, matching traffic against user-defined signatures to detect known attack patterns and policy violations, and can be placed inline to actively block malicious packets before they reach their target. The engine inspects a wide range of application-layer protocols including HTTP, DNS, TLS, SMB, and MQTT, and supports high-performance packet capture through specialized hardware a

NGINX Unit is an open-source application server designed to natively execute code across multiple programming language runtimes and WebAssembly within a single process. It serves as a multi-language application server that can run applications written in Go, Java, Node.js, Perl, PHP, Python, Ruby, and WebAssembly side by side, without requiring separate runtime environments for each language. The server distinguishes itself through a RESTful JSON control API that enables dynamic, zero-downtime configuration changes without restarting the server. It combines event-driven asynchronous I/O with

Beast es una librería de C++ para implementar clientes y servidores HTTP y WebSocket de bajo nivel. Funciona como un framework de red asíncrono diseñado para componer operaciones de E/S sin bloqueo y pilas de flujo en capas para gestionar el tráfico de red concurrente, utilizando específicamente el modelo asíncrono de Boost.Asio. La librería proporciona una implementación completa de los protocolos HTTP/1.1 y WebSocket. Para HTTP, incluye primitivas para analizar y serializar mensajes con soporte para codificación de transferencia fragmentada, lectura incremental del cuerpo y canalización de solicitudes. Su implementación de WebSocket cubre el ciclo de vida completo de la comunicación bidireccional, incluyendo apretones de manos, negociación de subprotocolos, fragmentación de mensajes y monitoreo de actividad mediante tramas de control. Beast incluye un conjunto especializado de herramientas para la gestión de buffers de red para optimizar la E/S de dispersión-recopilación a través de buffers de memoria dinámicos y basados en secuencias. También cubre la comunicación de red segura mediante la integración de capas SSL/TLS para flujos cifrados, autenticación de certificados y terminación segura de conexiones. El framework proporciona abstracciones multiplataforma para E/S de archivos y gestión de señales del sistema para apoyar el desarrollo de aplicaciones de red estables.

Este proyecto es una arquitectura empresarial integral para construir sistemas distribuidos multi-inquilino, implementada como una plataforma de microservicios de Spring Cloud. Proporciona un framework completo para gestionar microservicios, centrándose en la arquitectura de datos multi-inquilino y la provisión centralizada de identidad. La plataforma se distingue por su enfoque integrado de identidad y seguridad, utilizando un proveedor de identidad OAuth2 para gestionar el inicio de sesión único, control de acceso basado en roles y emisión de tokens JWT a través de servicios distribuidos. Además, separa los límites organizacionales mediante el aislamiento de datos multi-inquilino, asegurando que los recursos y datos estén lógica o físicamente particionados entre diferentes inquilinos. El sistema cubre una amplia superficie de capacidades distribuidas, incluyendo la gobernanza de servicios mediante enrutamiento de API gateway y disyuntores, y la coordinación de datos mediante transacciones distribuidas y mecanismos de bloqueo. También incluye una pila de observabilidad distribuida para el trazado de solicitudes y registro centralizado, junto con la sincronización de motores de búsqueda en tiempo real y mensajería asíncrona basada en eventos. El flujo de trabajo de desarrollo es compatible con herramientas de automatización para la generación de código de aplicación y empaquetado de binarios específico de la plataforma.

HttpRunner es un framework de pruebas de red multiprotocolo diseñado para automatizar pruebas funcionales y de regresión de interfaces HTTP. Funciona como un probador de red multiprotocolo que admite HTTP/1.1, HTTP/2, WebSocket, TCP y RPC para validar diversos patrones de comunicación. El proyecto incluye motores especializados para pruebas de rendimiento de API, pruebas basadas en datos y un generador de casos de prueba que convierte archivos HAR, comandos curl y definiciones de Swagger en scripts ejecutables. El framework se distingue por su capacidad para separar la lógica de prueba de los datos de negocio a través de un motor de ejecución basado en datos y su soporte para pruebas de carga de alta concurrencia a través de orquestación de carga distribuida. Cuenta con un sistema de plugins en múltiples lenguajes que permite a los usuarios extender el motor central con lógica de validación y procesamiento personalizada escrita en Go, Python o Java. El proyecto cubre una amplia gama de capacidades, incluyendo modelado de escenarios complejos para simulación de flujo de trabajo de usuario, validación de respuestas y análisis detallado de rendimiento de red. Proporciona herramientas para la generación de carga distribuida, sondeo de red geográfico y la integración de suites de pruebas automatizadas en pipelines de CI. El motor de pruebas central se puede ejecutar a través de una interfaz de línea de comandos o envolverse dentro del ecosistema de pruebas de Python utilizando un runner dedicado.

WebSocket-Node is a server-side implementation of the WebSocket protocol for Node.js environments. It serves as a framework for establishing persistent, bidirectional communication channels and low-latency data exchange between clients and servers. The project provides a secure socket implementation using transport layer security and includes an integrated client for establishing outbound encrypted connections. It utilizes a formal protocol-state machine and an event-driven connection framework to manage high-concurrency network streams. The framework covers server-side infrastructure includ

This is a Python WebSocket client library designed to establish full-duplex, persistent network connections for real-time exchange of text and binary data. It functions as an asynchronous network client and a TCP socket wrapper, managing the complete lifecycle of a connection from the initial handshake to graceful closure. The implementation includes a secure WebSocket client that handles SSL/TLS encryption, certificate verification, and secure handshake protocols. It further distinguishes itself by supporting advanced connectivity options, including proxy routing via HTTP or SOCKS proxies an