MindsDB -DNS Rebinding SSRF Protection Bypass

Detects DNS rebinding vulnerability that allows bypass of SSRF protection. The vulnerability exists in the URL validation mechanism where DNS resolution is performed without considering DNS rebinding attacks. id: CVE-2024-24759 info: name: MindsDB -DNS Rebinding SSRF Protection Bypass author: Lee...

CVE-2025-50505

CVE-2025-50505 अनधिकृत API के कारण Clash Verge Rev में मनमाने कमांड निष्पादन तथा विशेषाधिकार वृद्धि विवरण यह दोष clash-verge-service घटक द्वारा उजागर एक अप्रमाणित API एंडपॉइंट से उत्पन्न होता है, जो डिफ़ॉल्ट रूप से उन्नत विशेषाधिकारों के साथ स्थापित होता है। यह त्रुटि हमलावरों को मनमाने कमांड...

CVE-2026-51385

CVE-2026-51385 Рекомендация по CVE-2026-51385. Необходимо было опубликовать её, поскольку GRAPHIFY не распознала рекомендацию и не опубликовала её, а MITRE присвоила CVE-2026-51385; это и есть рекомендация. ES: Este fue mi primer cve, para ser honesto encontre una manera de romper la logica en la...

rebindMultiA

rebindMultiA rebindMultiA é uma ferramenta para realizar um ataque de rebind de Múltiplos Registros A. rebindmultia.com é um domínio que configurei para auxiliar nesses ataques. Ele faz com que cada IP seja seu próprio servidor de nomes autoritativo para o domínio IP.ns.rebindmultia.com. Por...

dns-rebind-toolkit

DNS Rebind Toolkit Demo | Aviso de Segurança | Payloads Incluídos | FAQ AVISO LEGAL: Este software é apenas para fins educacionais. Este software não deve ser utilizado para atividades ilegais. O autor não é responsável pelo seu uso. Não seja um babaca. O DNS Rebind Toolkit é um framework...

dns-rebinding-tool

Ispirato da @tavisio Questo progetto vuole essere un Toolkit All-in-One per testare ulteriori attacchi di DNS rebinding e il mio approccio per comprendere questo tipo di attacchi. Consiste in un server web e un server DNS pseudo che risponde solo a query A. L'indice principale del server web...

revsuit

RevSuit - Una piattaforma di connessione inversa flessibile e potente Inglese ｜简体中文 Panoramica RevSuit è una piattaforma di connessione inversa flessibile e potente progettata per ricevere connessioni dal sistema target durante un penetration test. Attualmente supporta i protocolli HTTP, DNS, RMI...

CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding

https://hackintoanetwork.com/blog/2023-starlink-dns-rebinding-attack-eng...

CVE-2026-77573

Weblate , a web-based continuous localization platform, is affected by a server-side request forgery (SSRF) vulnerability in versions prior to 2026.8 . A user with permission to manage component repository URLs can exploit DNS rebinding during VCS operations: Weblate validates the first DNS resol...

EUVD-2026-66721

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, a user permitted to manage component repository URLs can perform server-side request forgery against internal services through DNS rebinding during VCS operations. Weblate...

dref

Framework di sfruttamento del DNS Rebinding Questo progetto non è più mantenuto. dref si occupa del lavoro pesante per il DNS rebinding. Il seguente estratto da uno dei suoi payload integrati mostra il framework utilizzato per scansionare una sottorete locale da un browser agganciato; dopo aver...

rbndr

rbndr Einfacher DNS-Rebinding-Dienst rbndr ist ein sehr einfacher, nicht konformer Nameserver zum Testen von Software auf DNS-Rebinding-Schwachstellen. Der Server antwortet auf Anfragen, indem er zufällig eine der im Hostnamen angegebenen Adressen auswählt und sie als Antwort mit einer sehr...

dnsFookup

DnsFookup v 2.0.1 DNS Rebinding framework contenente: un server DNS ovviamente API web Python per creare nuovi sottodomini e controllare il server DNS, visualizzare i log, cose del genere una misera app React per renderlo più comodo Changelog Documentazione API Cosa fa? Permette di creare "dns bi...

behave

Behave! Ein noch in Entwicklung befindliches Überwachungs-Browser-Add-on für Seiten, die sich als böse Buben benehmen. Hinweis : Dies ist das Code-Repository des Projekts. Falls du nach den gepackten Erweiterungen suchst: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

singularity

Singularity of Origin Aggiornamenti recenti: NUOVO 2025-11-25 : Il rilascio di Chrome 142 ha aggiunto Local Network Access LNA, che impedisce le tecniche di attacco DNS rebinding implementate in Singularity. Il ramo LNA-from-Non-Secure-Contexts di Singularity of Origin implementa il supporto per...

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...

whonow

Server DNS Whonow Un server DNS malevolo per eseguire attacchi DNS Rebinding al volo. whonow ti consente di specificare dinamicamente le risposte DNS e le regole di rebinding usando le richieste di dominio stesse. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first...

iron-proxy

iron-proxy Das Problem CI-Jobs, KI-Codierungsagenten und sandboxed Container können beliebige ausgehende Anfragen stellen. Eine kompromittierte Abhängigkeit, eine Prompt-Injection oder ein bösartiger Build- Schritt kann Geheimnisse exfiltrieren, sich nach Hause telefonieren oder eine Reverse Shel...