Cross-site WebSocket hijacking
Named by 2 kept items in this workspace.
Search every workspace for Cross-site WebSocket hijacking. It matches the name as written, so it can find other things that share it.
The items that name it 2
Conventional attack pattern the origin allowlist defends against for human browsers, but not for an on-host agent
Attacker JavaScript on the victim's browser opens a connection to ws://localhost:18789, using the browser as a pivot to reach a local OpenClaw instance
All techniques in this workspace.