3 ms·
Had never heard of DNS rebinding before. Very cool. I presume this is only useful for extremely target attacks given the strict timing requirements?
by qeternity 7y ago
Had never heard of DNS rebinding before. Very cool. I presume this is only useful for extremely target attacks given the strict timing requirements?
- cjbprime 7y agoNo, people use it to scan entire LANs from the outside, untargeted exploration.
- dahfizz 7y agoNope, it would be pretty straightforward to set up a stateful dns server that serves the "real" ip on first request from a new client, and then ever subsequent request returns a local IP. That one dns server would enable an attack on anyone who visits the malicious site.