websockets/wscat
Wscat
wscat is a command-line WebSocket client and server tool that provides an interactive terminal interface for connecting to WebSocket endpoints, sending and receiving text messages in real time, and managing WebSocket control frames through typed slash commands. It supports basic HTTP authentication by injecting credentials into the initial WebSocket handshake request, and can route connections through an HTTP proxy using the CONNECT tunneling method.
The tool includes a built-in WebSocket server mode that listens on a specified port, accepts incoming client connections, and relays messages between connected clients. It also supports automated command execution, allowing predefined commands to run automatically after a WebSocket connection is established. The event-driven message loop handles incoming WebSocket frames and user commands asynchronously, while slash commands map directly to WebSocket control frames for ping, pong, and close operations.
The project provides a collection of WebSocket client implementations, including a basic auth client, a CLI client, a control frame sender, and a proxy client, all accessible through a single command-line interface. The documentation covers installation and usage for both client and server modes.
Features
- Terminal Interaction - Provides an interactive terminal interface for sending and receiving WebSocket messages in real time.
- Real-time Messaging - Transmits typed text lines to the connected server and displays incoming messages in real time.
- WebSocket Clients and Servers - Provides a built-in WebSocket server that accepts connections and relays messages between clients.
- Port-Based WebSocket Listeners - Starts a local WebSocket server on a specified port to accept incoming client connections.
- WebSocket Clients - Provides a command-line tool for connecting to WebSocket servers and exchanging messages interactively.
- WebSocket Handshake Authentications - Attaches basic HTTP authentication headers to the initial WebSocket handshake request for credential-based access.
- WebSocket Handshake Injections - Injects Basic HTTP authentication headers into the initial WebSocket upgrade request for credential-based access.
- WebSocket Control Frame Commands - Maps typed slash commands directly to WebSocket control frames for ping, pong, and close operations.
- WebSocket Control Frame Senders - Sends WebSocket control frames such as ping, pong, and close via slash commands.
- WebSocket Proxy Routings - Forces WebSocket connections through an HTTP proxy that supports the CONNECT method.
- WebSocket CONNECT Tunnels - Routes WebSocket connections through an HTTP proxy using the CONNECT tunneling method.
- Authenticated - Attaches basic HTTP authentication credentials to the WebSocket handshake request for credential-based access.
- Proxy-Routed - Routes WebSocket connections through an HTTP proxy supporting the CONNECT method.
- Event-Driven Architectures - Uses an event-driven architecture to handle incoming WebSocket frames and user commands asynchronously.
- Vulnerability Exploitation - Utility for testing and interacting with WebSocket services.
