Skip to content

DNS rebinding #39

Closed
Closed

Description

@noraj

As Interactsh is about OOB interaction supporting DNS it would be nice to have a DNS rebinding by the same occasion.

This mean having a way to get resolvable resource records with any given contents for assisting in detection and exploitation of SSRF-related vulnerabilities.

I have fetched a list of DNS rebinding tools but most are hard to setup, featureless and unmaintained. The most interesting project to understand all major features is 1u.ms (source), their website describe well all possibilities.

Right now Interactsh is similar to most HTTP request collector and inspector tools but lacks of DNS rebinding.

image

What I said for DNS could also be meaningful for HTTP, being able choose the body or headers served by the server.

Activity

  1. added
    Type: DiscussionSome ideas need to be planned and disucssed to come to a strategy.
    on Jun 13, 2021
  2. self-assigned this
    on Jun 21, 2021
  3. Mzack9999 commented on Jul 27, 2021

    @Mzack9999
    Member

    Implemented in #29

  4. locked and limited conversation to collaborators on Jun 23, 2022
  5. converted this issue into a discussion #317 on Jun 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type: DiscussionSome ideas need to be planned and disucssed to come to a strategy.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions