Explore the intricacies of DNS Rebinding attacks and prevention techniques in this comprehensive conference talk from BSidesLV 2019. Delve into the importance of understanding DNS Rebinding, follow a detailed attack walkthrough, and examine query components. Learn about multiple answers rebinding strategy, DNS cache flooding, and methods to bypass common DNS protections. Witness live demonstrations of hook and control techniques, service detection, and automation tools. Gain valuable insights on implementing effective protection measures against DNS Rebinding attacks, equipping yourself with essential knowledge for enhancing network security.
State of DNS Rebinding - Attack & Prevention Techniques and the Singularity of Origin
Overview
Syllabus
Intro
Contributions
Why Should You Care About DNS Rebinding
DNS Rebinding Attack Walkthrough
What's in a Query?
Multiple Answers Rebinding Strategy Illustrated
DNS Cache Flooding
DNS Rebinding Protection Bypasses
Common DNS Protections
Proxy Architecture
Demo 2: Hook & Control
Service Detection
How To Protect From DNS Rebinding
Demo 3: Automation
Taught by
BSidesLV
