Top 10 winner

TLS-poison

jmdx · GitHub

TLS-poison abuses TLS session persistence combined with DNS rebinding so that an https URL fed to a victim client (curl, or a browser image tag) is redirected mid-session to an internal service. This delivers attacker-chosen payload bytes to services like memcached or SMTP, giving generic SSRF and cross-protocol injection and image-tag CSRF without relying on a parser bug.

Record

Researcher

jmdx

Published by

GitHub

Format

Repository

Topic

Crypto

In the archive

• Ranked #4 in the 2020 Top 10 Web Hacking Techniques

Related sources

• Research presentation

Tags

• ssrf
• csrf
• dns-rebinding
• tls
• dns
• injection
• tooling
• owasp-a01-2021
• owasp-a02-2021
• owasp-a03-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of jmdx, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.