Web Hack List

Collected research

DNS Rebinding for Scraping and Spamming

Third part of a DNS rebinding series: because search engines ignore the Host header and serve over plain HTTP, an attacker can rebind a domain and have visitors' own browsers scrape Google, defeating CAPTCHAs and IP blocking. The same IP diversity supports comment spamming, poll fraud and brute force from other people's addresses.

Record

Published by
ha.ckers.org
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .