Skip to content

WebSocket brute-force hijacking

Named by 2 kept items in this workspace.

Search every workspace for WebSocket brute-force hijacking. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • OWASP Agentic Skills Top 10 (AST10)
    repo

    Malicious websites brute-force localhost WebSocket connections with no rate limiting to hijack local OpenClaw instances (ClawJacked, CVE-2026-28363).

  • OWASP Agentic Skills Top 10
    paper

    Malicious websites brute-force localhost WebSocket connections with no rate limiting to hijack local OpenClaw instances and register new devices without prompts (ClawJacked).

All techniques in this workspace.