Skip to content
DNS pinning and web proxies
portswigger.net | blog | #browser-security | #portswigger | #web-proxy | #dns-rebinding | #dns-pinning | #web-proxies | #intranet-security
Summary
DNS rebinding targets web proxies too: lookups happen on the proxy, so browser DNS pinning defenses don't apply, exposing corporate intranets. Stuttard's paper examines fixes and practical defenses.
- Published
- Collected