WAMP Server Test Suite Data Sheet
Test Suite:
WAMP Server Test SuiteDirection:
ServerThe Web Application Messaging Protocol (WAMP) is a WebSocket subprotocol. It is used widely in the modern Internet. WAMP offers routed RPC and PubSub features and is used to exchange messages between application components. This test suite can be used to test WAMP server implementations for security flaws and robustness problems.
Used specifications
Specification
Title
draft-oberstet-hybi-tavendo-wamp-02
The Web Application Messaging Protocol draft-oberstet-hybi-tavendo-wamp-02
RFC4627
The application/json Media Type for JavaScript Object Notation (JSON)
Tool-specific information
Tested messages
Notes
Specifications
HELLO
Code 1
draft-oberstet-hybi-tavendo-wamp-02
GOODBYE
Code 6
draft-oberstet-hybi-tavendo-wamp-02
ERROR
Code 8
draft-oberstet-hybi-tavendo-wamp-02
PUBLISH
Code 16
draft-oberstet-hybi-tavendo-wamp-02
SUBSCRIBE
Code 32
draft-oberstet-hybi-tavendo-wamp-02
UNSUBSCRIBE
Code 34
draft-oberstet-hybi-tavendo-wamp-02
CALL
Code 48
draft-oberstet-hybi-tavendo-wamp-02
REGISTER
Code 64
draft-oberstet-hybi-tavendo-wamp-02
UNREGISTER
Code 66
draft-oberstet-hybi-tavendo-wamp-02
YIELD
Code 70
draft-oberstet-hybi-tavendo-wamp-02
AUTHENTICATE
Code 5
draft-oberstet-hybi-tavendo-wamp-02
CANCEL
Code 49
draft-oberstet-hybi-tavendo-wamp-02
Supported protocol features
Specifications
Notes
Transport over WebSocket
draft-oberstet-hybi-tavendo-wamp-02
Transport over RawSocket
draft-oberstet-hybi-tavendo-wamp-02
JSON message serialization
draft-oberstet-hybi-tavendo-wamp-02
MessagePack message serialization
draft-oberstet-hybi-tavendo-wamp-02
Challenge-Response Authentication
draft-oberstet-hybi-tavendo-wamp-02
HMAC-SHA256 and PBKDF2
Unsupported protocol features
Notes
Specifications
Transport over HTTP Longpoll
draft-oberstet-hybi-tavendo-wamp-02
Cookie-based Authentication
draft-oberstet-hybi-tavendo-wamp-02
TLS Certificate Authentication
draft-oberstet-hybi-tavendo-wamp-02
Test tool general features
- Fully automated black-box negative testing
- Ready-made test cases
- Written in Java(tm)
- GUI command line remote interface modes
- Instrumentation (health-check) capability
- Support and maintenance
- Comprehensive user documentation
- Results reporting and analysis