WebSocket Server Test Suite Data Sheet
Test Suite: WebSocket Server Test Suite
Direction: Server
The WebSocket protocol enables bidirectional, full-duplex communication channel over a single TCP socket. The WebSocket Protocol is designed to work between web browsers and servers, but it can be used in any application. The goal of the WebSocket protocol is to provide a mechanism for applications in web browsers that need two-way communication with servers that does not rely on opening multiple HTTP connections. This test suite can be used to test WebSocket servers for security flaws and robustness problems. The test suite contains test cases for testing WebSocket protocol specific operations like WebSocket Handshake and control frames. Additionally, the test suite can be configured to test web service specific payload which goes over the WebSocket.
Used specifications
| Specification |
Title |
Notes |
| RFC6455 |
The WebSocket Protocol |
|
| RFC6454 |
The Web Origin Concept |
|
| RFC3986 |
Uniform Resource Identifier (URI): Generic Syntax |
Parts that are needed in WebSocket Handshake |
| RFC2616 |
Hypertext Transfer Protocol u002du002d HTTP/1.1 |
Parts that are needed in WebSocket Handshake |
| RFC2617 |
HTTP Authentication: Basic and Digest Access Authentication |
Parts that are needed in WebSocket Handshake |
Tool-specific information
| Tested messages |
Specifications |
| WebSocket Handshake Request |
RFC6455 |
| WebSocket Control Frame – Close |
RFC6455 |
| WebSocket Control Frame – Ping |
RFC6455 |
| WebSocket Control Frame – Pong |
RFC6455 |
| WebSocket Data Frame |
RFC6455 |
| Feature |
Description |
| WebSocket payload fuzzing |
Payload that goes over WebSocket can be fuzzed. |
| JSON payload fuzzing |
Specific test cases are generated for JSON payload. |