Collected research

Anti-DNS Pinning ( DNS Rebinding ) + Socket in FLASH

J U M P E R Z . N E T - Anti-DNS Pinning ( DNS Rebinding ) + Socket in FLASH

Kanatoko · jumperz.net

Kanatoko shows Flash Player 9's ActionScript 3 Socket class combined with DNS rebinding hands an attacker a raw TCP socket inside the victim's browser: intranet port scanning, shellcode delivery, spam, proxying and defeat of any IP-based authentication. Java applets pin DNS by default, but not under LiveConnect or behind a proxy.

Record

Document

J U M P E R Z . N E T - Anti-DNS Pinning ( DNS Rebinding ) + Socket in FLASH

Researcher

Kanatoko

Published by

jumperz.net

Topic

Other

In the archive

• Collected in the 2007 research round

Related sources

• Jumperz research demonstration

Tags

• dns-rebinding
• flash
• sop-bypass
• same-origin-policy
• dns
• auth-bypass
• owasp-a01-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of Kanatoko, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.