OWASP Damn Vulnerable Web Sockets
owasp.org