Later archive addition

Arecibo: an out-of-band HTTP/DNS exfiltration tool

Juan Manuel Fernandez · Tarlogic Security · 9 November 2018

Arecibo is an out-of-band exfiltration service for blind vulnerabilities. It provides unique HTTP and DNS endpoints, records callbacks, and helps testers confirm and extract data from flaws such as blind XXE or SSRF when the vulnerable application does not return useful output directly.

Record

Researcher

Juan Manuel Fernandez

Published by

Tarlogic Security

Date

9 November 2018

In the archive

• Added to the 2018 archive after the original list was published

Tags

• data-exfiltration
• dns
• http
• xxe
• ssrf
• tooling
• owasp-a03-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of Juan Manuel Fernandez, first published at the original source. Preserved copies are kept so the citation survives its host.