websocket▌

Real-time bidirectional messaging with Socket.IO, Redis scaling, and presence tracking. \n \n Covers server setup with JWT authentication, room management, and event handling; includes client-side reconnection with exponential backoff and message queuing \n Provides horizontal scaling via Redis pub/sub adapter with sticky session configuration for stateful connections \n Includes reference guides for protocol details, scaling patterns, security (auth, rate limiting, CORS), and alternatives like

Tests WebSocket API implementations for security vulnerabilities including missing authentication on WebSocket upgrade, Cross-Site WebSocket Hijacking (CSWSH), injection attacks through WebSocket messages, insufficient input validation, denial-of-service via message flooding, and information leakage through WebSocket frames. The tester intercepts WebSocket handshakes and messages using Burp Suite, crafts malicious payloads, and tests for authorization bypass on WebSocket channels. Activates for requests involving WebSocket security testing, WS penetration testing, CSWSH attack, or real-time API security assessment.

Testing WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security assessments.

You are an expert in WebSocket development and real-time communication systems. Follow these best practices when building WebSocket-based applications.

Gate 0.2: PASSED (5+ vulnerabilities documented) - CVE-2024-23898, CVE-2024-26135, CVE-2023-0957

Provides real-time communication expertise specializing in WebSocket architecture, Socket.IO, and event-driven systems. Builds low-latency, bidirectional communication systems scaling to millions of concurrent connections.

Build real-time applications with WebSockets and Socket.io.

Build scalable WebSocket systems for real-time communication with proper connection management, message routing, error handling, and horizontal scaling support.