DNS pinning and web proxies
portswigger.net | blog | #browser-security | #portswigger | #web-proxy | #dns-rebinding | #dns-pinning | #web-proxies | #intranet-security
Summary
DNS rebinding targets web proxies too: lookups happen on the proxy, so browser DNS pinning defenses don't apply, exposing corporate intranets. Stuttard's paper examines fixes and practical defenses.
- Published
- Collected
--- id: 2319 title: "DNS pinning and web proxies" source_domain: portswigger.net source_url: "https://portswigger.net/blog/dns-pinning-and-web-proxies" published_at: "2007-07-10T13:10:00Z" tags: ["browser-security", "portswigger", "web-proxy", "dns-rebinding", "dns-pinning", "web-proxies", "intranet-security"] phying_url: "https://phying.com/item/2319" lang: en --- # DNS pinning and web proxies ## Summary DNS rebinding targets web proxies too: lookups happen on the proxy, so browser DNS pinning defenses don't apply, exposing corporate intranets. Stuttard's paper examines fixes and practical defenses. ## Intelligence Metadata - **Sources:** portswigger.net - **Published:** 2007-07-10T13:10:00Z - **Original:** https://portswigger.net/blog/dns-pinning-and-web-proxies - **Phying News:** https://phying.com/item/2319