Professional Community

WebSocket Traffic Monitor & Exporter

WebSocket Traffic Monitor & Exporter is a comprehensive extension for real-time monitoring, capturing, and exporting WebSocket traffic across all Burp tools. It provides tool source tracking, numbered connection organization, and CSV export capabilities through a user-friendly interface.

Features

  • Real-time WebSocket Monitoring: Captures WebSocket messages from all Burp tools including Proxy, Repeater, Scanner, and Intruder. Displays incoming and outgoing messages in real-time with support for both text and binary message types. Features intelligent capture control with enable/disable toggle functionality.
  • Message Management: Tracks which Burp tool each WebSocket originated from and assigns unique IDs to each connection for easy identification. Only displays WebSockets that have actually received messages and provides context menu integration for sending historical messages to the monitoring tab.
  • User-Friendly Interface: Split-pane layout with message table on the left and payload viewer on the right. Scrollable dropdown organized by newest connections first with responsive real-time updates. Click any message row to view the full payload content.
  • CSV Export: Auto-suggests filenames in ID-URL-TOOL.csv format with complete message data including direction, content, binary status, length, and Burp-consistent timestamps.

Usage

Basic Monitoring

  1. Navigate to the "WebSocket Messages" tab
  2. Ensure "Enable Message Capture" is checked
  3. Use any Burp tool to interact with WebSocket endpoints
  4. Messages appear automatically in the table as they flow

Message Export

  1. Select a WebSocket from the dropdown menu
  2. Click "Export to CSV" button
  3. Choose destination folder in the file dialog
  4. Enter filename (defaults to ID-URL-TOOL.csv format)
  5. CSV includes direction, message content, binary flag, length, and timestamp

Capture Control

  • Toggle message capture on/off without losing existing data.
  • WebSockets opened while capture is disabled are tracked in the background but not displayed.
  • Re-enabling capture shows new traffic from previously opened connections, providing flexible monitoring control.

Context Menu Integration

Right-click on WebSocket messages in other Burp tools to send them to the "WebSocket Messages" tab under "Historical Messages" for centralized analysis and export.

Author

Author

Erinna Anthony, PortSwigger

Version

Version

1.0.0

Rating

Rating

Popularity

Popularity

Last updated

Last updated

09 September 2025

Estimated system impact

Estimated system impact

Overall impact: Empty

Memory
Empty
CPU
Empty
General
Empty
Scanner
Empty

You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.

You can view the source code for all BApp Store extensions on our GitHub page.

Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates.

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.

Go back to BappStore

Note:

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.