dns-rebinding-attacks

What problem does it solve?

DNS rebinding attacks exploit the browser's same-origin policy by manipulating DNS resolutions to cause a victim's browser to access internal services. This Skill provides a detailed playbook for understanding, simulating, and defending against such client-side network attacks in authorized testing environments.

Core Features & Use Cases

• TTL manipulation techniques to defeat DNS caching in browsers.
• Attack variants including Classic HTTP rebinding, WebSocket rebinding, TOCTOU, and multiple A records.
• Defense considerations such as host header validation and private network access controls; use cases include auditing SOP protections and internal service exposure.

Quick Start

Assess a target by loading a controlled page that triggers DNS resolution and observe subsequent requests to internal services after DNS rebinding in a safe, authorized test environment.