Questions tagged [dns-rebinding]
The dns-rebinding tag has no usage guidance.
11
questions
0
votes
1
answer
36
views
Is a random unknown HTTP request header 'Host' that is reflected in the HTTP response 'Location" header (3xx) a open redirect or DNS rebinding?
If I send an unknown domain name in the HTTP request header 'Host' to a webserver and the webserver responds with a HTTP status code 301/302 (redirect) along with a HTTP response header 'Location' ...
- 6,661
-1
votes
1
answer
1k
views
DNSSEC is not configured for X website
I'm pretty new to this world of security and I'm doing some challenges trying to solve puzles of security, the thing is I have a website that is not loading it throws a timeout if I do ping, but ...
- 99
-2
votes
1
answer
140
views
is it possible that an attacker catch a page name from history?
like if an attacker sets a dns rebinding would he be able to get the router name from the history so he can make his attack more accurate .
- 117
2
votes
1
answer
487
views
Exact difference CSRF vs. DNS Rebinding attacks
I am currently studying CSRF and DNS Rebinding attacks and I am wondering what the exact difference is. As far as I understand, DNS rebinding is way to bypass CORS and thus get information from a ...
- 21
0
votes
0
answers
158
views
How the new variation of DNS rebinding tunnel attack vector can be mitigated in the enterprise (NOT SME)?
I see in last days so many posts about this attack but nothing to suggest how to stop in the enterprise would be great to know what would be a good steps to follow to mitigate this risk in the ...
- 1,264
5
votes
2
answers
301
views
Is it safe to exclude my own registered domain from rebinding protection?
I want to access my web server from the LAN and from the internet using the same name (www.my-own-domain.example). However, my router (Fritz!box) has rebind protection enabled and does not resolve DNS ...
- 61
2
votes
1
answer
714
views
When implementing CORS, should I check for a correct HOST header in my webapp?
I have a backend web server that serves an API (over HTTPS) to a frontend browser client on a different subdomain. It uses CORS to allow this.
The CORS spec directs you to not send the CORS headers ...
- 135
9
votes
2
answers
2k
views
Does HTTPS protect against DNS rebinding?
I've been playing around with DNS rebinding. I made a little setup and I have it working fine with regular HTTP requests. I then tried to get it working over HTTPS and had a little "duh" moment:
...
- 1,447
3
votes
1
answer
456
views
DNS Rebinding attack - does this attack require victim to use an attacker's DNS server for resolution? How will that happen?
Usually a preferred DNS server will be set in router's configuration and it will be either the organization's server or some trusted public server. So how would attacker get the victim to use his DNS ...
- 193
5
votes
1
answer
1k
views
DNS Rebinding attack - will the victim's browser send cookies?
How does a DNS Rebinding attack work? How can it violate the Same-origin policy?
Will the victim's browser send cookies to the remote server (specified by IP), when the domain is not the same as is ...
- 750
7
votes
3
answers
7k
views
Does DNS pinning protect against all DNS rebinding attacks?
I found an example of a DNS rebinding attack scenario in the paper "Dynamic Pharming Attacks and Locked Same-origin Policies for Web Browsers".
Figure 1: An example of a dynamic pharming attack ...
- 211