Homeward Bound - Scanning Private IP Space with DNS Rebinding

Offered By: NorthSec via YouTube

Course Description

Overview

Explore DNS Rebinding attacks and their resurgence in cybersecurity through this 41-minute NorthSec conference talk. Delve into the reasons behind the renewed interest in these attacks, including high-profile disclosures by Tavis Ormandy. Learn about the potential vulnerabilities in consumer software that treat localhost as secure. Discover a set of tools designed to streamline and scale DNS Rebinding attacks, and understand how these can be utilized for network reconnaissance from within a browser. Examine the concept of an opt-in "localhost census" page that employs DNS rebinding to identify HTTP-listening localhost services on visitors' computers, contributing to a comprehensive database of results.

Syllabus

Danny Cooper & Allan Wirth - Homeward Bound: Scanning Private IP Space with DNS Rebinding

Taught by

NorthSec

Related Courses

Computer Security
Stanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network