DNS Rebinding

Attack that switches a hostname's DNS answer to the attacker's server after the victim loads a page.

Specifications & Metrics

cwe

CWE-350

impact

High

Core Principles & Analysis

• Turns the victim's browser into a proxy against devices on its own network.
• Routers, printers and local dashboards are the classic targets.
• Defences pin DNS results and validate Host headers on local services.