How to Hack WebSockets and Socket.io

### WebSockets and socket.io testing with Burp Suite This post demonstrates practical techniques for intercepting and manipulating socket.io WebSocket communications using Burp Suite, including forcing polling transport, breaking the WebSocket upgrade handshake with match-and-replace rules, and creating session-handling macros to manage socket.io session IDs and message lengths so Repeater/Intruder testing can be performed over HTTP polling.