Collected research

Java Applets and DNS Rebinding

Billy (BK) Rios » Java Applets and DNS Rebinding

Java applets are pinned to DNS name rather than IP, so an XSS-cached applet can be DNS-rebound by reloading or launching a new JVM after the record changes. Unlike Flash sockets the applet may reach ports below 1024 and use Java's database and RMI libraries. A parallel NGS finding abuses a codebase URI prefixed 'verbatim:'.

Record

Document

Billy (BK) Rios » Java Applets and DNS Rebinding

Published by

xs-sniper.com

Topic

Server

In the archive

• Collected in the 2007 research round

Tags

• dns-rebinding
• java
• dns
• sop-bypass
• xss
• attack-chain
• owasp-a01-2021
• owasp-a03-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of xs-sniper.com, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 16 August 2026.