Automatic tool for DNS rebinding-based SSRF attacks
Las características principales de daeken/httprebind son: Server Side Request Forgery.
Las alternativas de código abierto para daeken/httprebind incluyen: voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It… daffainfo/allaboutbugbounty — AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing.… brannondorsey/whonow — A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53). damian89/extended-ssrf-search — Smart ssrf scanner using different methods like parameter brute forcing in post and get... fsecurelabs/dref — DNS Rebinding Exploitation Framework. brannondorsey/dns-rebind-toolkit — A front-end JavaScript toolkit for creating DNS rebinding attacks.
This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
A front-end JavaScript toolkit for creating DNS rebinding attacks.