> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/web/websockets/websocket-handshake-manipulation.md).
# WebSocket 握手操控
### 操纵 WebSocket 握手以利用漏洞
这个在线商店的实时聊天功能基于 **WebSockets**. / 系统中存在一个 XSS 过滤器：它很严格，但存在可利用的缺陷。
聊天输入框允许你发送消息，这些消息会在客服一侧实时显示。
#### 初始 XSS 过滤器测试
将以下载荷发送到聊天中时：
```javascript
```
服务器返回以下消息：
* **检测到攻击：事件处理器**
* WebSocket 连接立即 **关闭**.
只需重新加载页面后，会出现以下消息：
* **该地址已被列入黑名单**
因此，该 IP 地址会被临时封禁。
#### 绕过黑名单
在建立 WebSocket 握手时添加以下 HTTP 头：
```http
X-Forwarded-For: 0.0.0.0
```
服务器再次接受了连接。/ 为了避免每次都手动添加，此头被配置为 **在代理中永久**.
#### XSS 过滤绕过
连接恢复后，将载荷稍作修改以绕过过滤器：
```javascript
```
这种断行和语法上的变化使其能够绕过检测。
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://hacking-notes.jord4n.pro/zh/web/websockets/websocket-handshake-manipulation.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.