TrustedSec releases LLMHaxor update adding WebSocket proxy for Burp Intruder-based LLM application testing
TrustedSec consultant Geoff Walton published an update to LLMHaxor, his Burp Suite plugin for testing LLM-enabled applications. The post is a tooling and practitioner-methodology update, not a threat or incident report. The main change is a new proxy that collects WebSocket streaming responses and exposes them to Burp Intruder as an HTTP interface, closing a gap noted in the original post as chat integrations moved toward WebSocket streaming. The author argues the tool still has value despite newer options such as Garak, Augustus, PyRIT and PortSwigger's native Burp AI extensions, because it has a minimal footprint, runs from a user's home directory without special permissions or internet access, and works with local small models (Ollama in CPU mode with Granite or Llama3.2) in restricted client environments such as VDI.
Detalhes técnicos
- WebSocket support: locate the WebSocket API (typically a GET returning a 101 Switching Protocols response), change the scheme to ws/wss, and point Intruder at localhost. Some HTTP headers may need to be moved.
- The update also includes reliability and logging improvements and other bug fixes.
- Common practical issues remain: session maintenance, access token acquisition and expiry detection, and correct message formatting so the intended layer is actually tested.
Linha do tempo
-
TrustedSec releases LLMHaxor update adding WebSocket proxy for Burp Intruder-based LLM application testing
ler a análise desta fonte ocultar
TrustedSec consultant Geoff Walton published an update to LLMHaxor, his Burp Suite plugin for testing LLM-enabled applications. The post is a tooling and practitioner-methodology update, not a threat or incident report. The main change is a new proxy that collects WebSocket streaming responses and exposes them to Burp Intruder as an HTTP interface, closing a gap noted in the original post as chat integrations moved toward WebSocket streaming. The author argues the tool still has value despite newer options such as Garak, Augustus, PyRIT and PortSwigger's native Burp AI extensions, because it has a minimal footprint, runs from a user's home directory without special permissions or internet access, and works with local small models (Ollama in CPU mode with Granite or Llama3.2) in restricted client environments such as VDI.
Technical Details
- WebSocket support: locate the WebSocket API (typically a GET returning a 101 Switching Protocols response), change the scheme to ws/wss, and point Intruder at localhost. Some HTTP headers may need to be moved.
- The update also includes reliability and logging improvements and other bug fixes.
- Common practical issues remain: session maintenance, access token acquisition and expiry detection, and correct message formatting so the intended layer is actually tested.