dns-rebinding

A DNS rebinding attack framework.

Simple DNS Rebinding Service

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

A front-end JavaScript toolkit for creating DNS rebinding attacks.

DNS Rebinding Exploitation Framework

DNS rebinding toolkit

Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.

Proof of concept demonstrating DNS rebinding to extract Wi-Fi credentials from Bang & Olufsen speakers.

A dns server, small and cute. Use it to test web security such as dnslog and dns rebinding. it's kind of like ceye.io

SSRF prevention for Laravel. Protect Http::, Guzzle, and validate user-supplied URLs against server-side request forgery.

Chrome extension to block DNS rebinding attacks.

Coredns plugin that implement --stop-dns-rebind from dnsmasq

A framework to exploit DNS rebinding vulnerabilities

Live PoC: MCP attacks that compromise AI agents mid-session and how to block them in a few lines of code.

A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves.

Security gate and deterministic lockfile for Agentic Resource Discovery (ARD) catalogs. Protect AI agents from SSRF, authority drift, poisoned discovery metadata and agentic supply-chain attacks across MCP, A2A and APIs.

SSRF protection that connects to the address it validated.

SSRF- and DNS-rebinding-safe outbound HTTP clients: exact egress authorities plus DNS-pinned httpx transports.

A static dev server with secure and convenient defaults. The request guard backing it is separately importable, for custom servers.