> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# WebSockets Vulnerabilities

> Recursos cross-platform para WebSockets Vulnerabilities: máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

# WebSockets Vulnerabilities

Esta página agrega los **recursos para practicar WebSockets Vulnerabilities** de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

## Recursos curados

| Fuente      | Enlace                                                                                             |
| ----------- | -------------------------------------------------------------------------------------------------- |
| PortSwigger | [https://portswigger.net/web-security/websockets](https://portswigger.net/web-security/websockets) |

## Máquinas HTB que practican WebSockets Vulnerabilities (1)

| Máquina                                                 | SO      | Dificultad                                           |
| ------------------------------------------------------- | ------- | ---------------------------------------------------- |
| [MultiMaster](/htb/machines/windows/insano/multimaster) | Windows | <span className="dbadge dbadge-insane">INSANE</span> |

## Labs PortSwigger que practican WebSockets Vulnerabilities (2)

| Lab                                                                                                                                               | Dificultad                                                 | Topic      | Oficial                                                                                                        |
| ------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- | ---------- | -------------------------------------------------------------------------------------------------------------- |
| [Manipulating WebSocket messages to exploit vulnerabilities](/portswigger/labs/websockets/manipulating-messages-to-exploit-vulnerabilities)       | <span className="dbadge dbadge-easy">APPRENTICE</span>     | WebSockets | [Abrir](https://portswigger.net/web-security/websockets/lab-manipulating-messages-to-exploit-vulnerabilities)  |
| [Manipulating the WebSocket handshake to exploit vulnerabilities](/portswigger/labs/websockets/manipulating-handshake-to-exploit-vulnerabilities) | <span className="dbadge dbadge-medium">PRACTITIONER</span> | WebSockets | [Abrir](https://portswigger.net/web-security/websockets/lab-manipulating-handshake-to-exploit-vulnerabilities) |

## Rooms TryHackMe que practican WebSockets Vulnerabilities (2)

| Room                                                                 | Dificultad                                         | Tipo        | Acceso  | Oficial                                                |
| -------------------------------------------------------------------- | -------------------------------------------------- | ----------- | ------- | ------------------------------------------------------ |
| [AWS API Gateway](/tryhackme/rooms/awsapigateway)                    | <span className="dbadge dbadge-easy">MEDIUM</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/awsapigateway)      |
| [Request Smuggling: WebSockets](/tryhackme/rooms/wsrequestsmuggling) | <span className="dbadge dbadge-easy">MEDIUM</span> | Walkthrough | 🔵 VIP  | [Abrir](https://tryhackme.com/room/wsrequestsmuggling) |

***

← [Volver al glosario completo](/glosario)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"WebSockets Vulnerabilities","termCode":"websockets","inLanguage":"es","url":"https://rootea.es/skills/websockets","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Glosario táctico de pentesting","url":"https://rootea.es/glosario"}}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"ItemList","name":"Máquinas HTB que practican WebSockets Vulnerabilities","numberOfItems":1,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://rootea.es/htb/machines/windows/insano/multimaster","name":"MultiMaster"}]}`}
</script>

*Última actualización: 2026-06-07*