Cross-Site Websocket Hijacking (CSWSH)
![](https://www.praetorian.com/wp-content/uploads/2024/06/5cdde40145b360fea3ee8c3e_20190507-cswsh-thumb.jpg)
The WebSocket protocol is a fairly simple one; regardless, understanding how it works is essential to understanding how to secure (and exploit) it. The protocol is comprised of two parts: a handshake and the data transfer.