Support for scanning websocket RAG chatbots using generator

[vjayant93]

Summary

I tried to use the REST generator to scan a RAG template chatbot that uses the websocket over GET requests for communication with a websocket security key.

Basic example

This was the config.json I tried to use

{
"rest": {
"RestGenerator": {
"name": "Dwan test chat",
"uri": "wss://example-api-endpoint.com/dev",
"method": "get",
"headers": {
"Sec-Websocket-Key": "$KEY"
},
"req_template_json_object": {
"origin_name": "https://rag-chatbot.com",
"message_log":
[
{"role": "Human", "text": "$INPUT"}
]
},
"response_json": true,
"response_json_field": "text"
}
}
}

The command <python -m garak --model_type rest -G C:\Jayant\garak\garak-config.json --probes malwaregen.Evasion --generations 2>produces the result - No connection adapters were found for 'wss://example-api-endpoint.com/dev'

I assume the rest only supports requests over https protocol and doesn't support websocket.

A specialized support and JSON template for websocket will be very useful as many chatbots are preferring websocket communication for reduced latency.

Motivation

Why are we doing this? What use cases does it support? What is the expected outcome?

[vjayant93]

I also noticed a similar issue that is still open - #435