Skip to content

DNS rebinding #39

Description

@noraj

As Interactsh is about OOB interaction supporting DNS it would be nice to have a DNS rebinding by the same occasion.

This mean having a way to get resolvable resource records with any given contents for assisting in detection and exploitation of SSRF-related vulnerabilities.

I have fetched a list of DNS rebinding tools but most are hard to setup, featureless and unmaintained. The most interesting project to understand all major features is 1u.ms (source), their website describe well all possibilities.

Right now Interactsh is similar to most HTTP request collector and inspector tools but lacks of DNS rebinding.

image

What I said for DNS could also be meaningful for HTTP, being able choose the body or headers served by the server.

Metadata

Metadata

Assignees

Labels

Type: DiscussionSome ideas need to be planned and disucssed to come to a strategy.

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions