3 ms·
If I'm binding to an IP why do I have to worry about DNS TTL?
by wdr1 10y ago
If I'm binding to an IP why do I have to worry about DNS TTL?
- mynameisvlad 10y agoParent comment is referring to the PoC created here. The PoC creator would have to wait for TTL to expire each time for all of 127.0.0.1/8 as opposed to just having to wait for one TTL to expire to set it to just 127.0.0.1.
- semi 10y agoI don't think that is true, though maybe I'm misunderstanding. The DNS rebinding is a workaround so that you can read the reply of a message. Enumerating a list of services that are running is something you could do as a precursor to using the dns rebinding attack to attack it. I am not familiar with javascript networking enough to say what kind of rate limiting you would incur, but in theory at least you should be able to probe many IPs at once.