dns-rebinding

A DNS rebinding attack framework.

Simple DNS Rebinding Service

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

A front-end JavaScript toolkit for creating DNS rebinding attacks.

DNS Rebinding Exploitation Framework

DNS rebinding toolkit

Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.

Proof of concept demonstrating DNS rebinding to extract Wi-Fi credentials from Bang & Olufsen speakers.

A dns server, small and cute. Use it to test web security such as dnslog and dns rebinding. it's kind of like ceye.io

SSRF prevention for Laravel. Protect Http::, Guzzle, and validate user-supplied URLs against server-side request forgery.

Self-hosted SSRF redirect, payload, callback, and DNS workbench

Chrome extension to block DNS rebinding attacks.

Coredns plugin that implement --stop-dns-rebind from dnsmasq

A framework to exploit DNS rebinding vulnerabilities

SSRF protection that connects to the address it validated.

Live PoC: MCP attacks that compromise AI agents mid-session and how to block them in a few lines of code.

A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves.

SSRF- and DNS-rebinding-safe outbound HTTP clients: exact egress authorities plus DNS-pinned httpx transports.

Security gate and deterministic lockfile for Agentic Resource Discovery (ARD) catalogs. Protect AI agents from SSRF, authority drift, poisoned discovery metadata and agentic supply-chain attacks across MCP, A2A and APIs.