Top 10 winner
Anti-DNS Pinning ( DNS Rebinding ) : Online Demonstration
J U M P E R Z . N E T - Stealing Information Using Anti-DNS Pinning ( DNS Rebinding ) : Online Demonstration
Kanatoko's live anti-DNS-pinning demo: a browser is made to resolve the attacker's hostname to a private RFC1918 address, read the intranet page and post it back to jumperz.net. Lists eight tested IE/Firefox/Opera builds. The demo form itself, including its target endpoint and 127.0.0.1 default, was dropped in conversion.
Record
- Document
- J U M P E R Z . N E T - Stealing Information Using Anti-DNS Pinning ( DNS Rebinding ) : Online Demonstration
- Researcher
- Kanatoko
- Published by
- jumperz.net
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Kanatoko, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .