cURL like command for WebSocket. The main purpose of this tool is troubleshooting of WebSocket. cURL is a handy when troubleshoot, I wanted to have something similar with WebSocket.
WebSocket_cURL is a command line tool like cURL command for WebSocket which enables you to send a stirng or binary file as WebSocket data. Also you can replay array data from Wireshark capture.
This script is not only sending data but also there is a cool feature, FrameCrafter, that enables you to modify WebSocket frame, then send it or save to a file.
Note : You can set Sec-WebSocket-Key value via -k option. You can add HTTP header via -H option. Mask is hardcoded that is "BEEF".
- General WebSocket_cURL features Send data in one-liner command like cURL command
Sending a string data. This is --string (-s) option.
$ python WebSocket_cURL HOST PORT URL --string "DEAD BEEF"
Sending a binary file. This is --binary (-b) option.
$ python WebSocket_cURL HOST PORT URL --binary myfile.bin
Sending an array file. This is --array (-a) option. You can copy/paste array data from Wireshark or you can generate via FrameCrafter feature, --editor option.
$ cat myarray.txt (copied from Wireshark)
0x81, 0x9c, 0x39, 0x5d, 0xcf, 0x95, 0x6b, 0x32, 0xac, 0xfe, 0x19, 0x34, 0xbb, 0xb5, 0x4e, 0x34, 0xbb, 0xfd, 0x19, 0x15, 0x9b, 0xd8, 0x75, 0x68, 0xef, 0xc2, 0x5c, 0x3f, 0x9c, 0xfa, 0x5a, 0x36, 0xaa, 0xe1
$ python WebSocket_cURL HOST PORT URL --array myarray.txt
- FrameCrafter
Use --editor (-e) option at the end of the command to enter FrameCrafter menu where you can flip/overwrite WebSocket frame fields. You can create crafted/malformed frame. Save the modified data to a file so that you can read/send via -a option.
$ python WebSocket_cURL HOST PORT URL --string "DEAD BEEF" --editor
Please read HOWTO file for more detail.
$ python WebSocket_cURL.py --help
Usage: WebSocket_cURL.py [OPTIONS] HOST PORT URL
Options:
-s, --string TEXT Give a string to send
-b, --binary FILENAME Give a path of a binary data
-a, --array FILENAME Give a path of frame hex data
-e, --editor This enters FrameCrafter menu
-H, --header TEXT Add HTTP headers
-k, --key TEXT Specify Sec-WebSocket-Key header value, otherwise it uses default value
--help Show this message and exit.
Note : You can add HTTP header with --header option. It simply add another header, it does not replace existing default header. Default headers such as Sec-WebSocket-Version, Host etc, can not be replaced by --header option. The option simply add another header so you will see duplicated headers. If you like to modify one of the default headers, you can modify in the source code.