undefined | Better HN

0 pointsgruez6y ago0 comments

Ublock allows you to block websocket requests. eg.

    *$websocket

will block all websocket connections. You probably want to operate on a whitelist on a site by site basis. Blocking localhost or 127.0.0.1 isn't reliable because sites can use dns rebinding attacks to bypass your filters.

0 comments

4 comments · 4 top-level

Cactus20186y ago

Thanks for this. Adding the string to uBlock Origin's "My Filters" tab worked perfect.

    *$websocket

Tested with https://websocketstest.com/

jhhh6y ago

Ublock origin says it supports ABP filter rules which allow for whitelisting sites which seems like it should allow something approximating:

  ~site.com$websocket
  *,~site.com$websocket

However this seems like it's invalid syntax because switching your example to this opens all websocket use back up tested via https://websocketstest.com/

1 more reply

parliament326y ago

That helps one of the vectors, but you can scan with pure JS too: https://portswigger.net/research/exposing-intranets-with-rel...

thanksforfish6y ago

This helps, but can't you also do this sort of scanning without websockets?

1 more reply

j / k navigate · click thread line to collapse