nccgroup/singularity
View on GitHub ↗ ★ 1,325 JavaScript
A DNS rebinding attack framework.
5 mentions on Hacker News by 4 people: 2 stories, 3 comments · first 2018-08-17 · latest 2024-08-07
20082026
-
…But nothing new: https://research.nccgroup.com/2023/04/27/state-of-dns-rebind... https://github.com/nccgroup/singularity/wiki/Protection-Bypa...
comment by dytir · 2024-08-07 · in Deprecate 0.0.0.0 for Private Network Access -
…a zero day. The 0.0.0.0 bypass has been documented for a while now[1], including PNA bypass[2]. [1] https://github.com/nccgroup/singularity/wiki/Protection-Bypa... [2] https://research.nccgroup.com/2023/04/27/state-of-dns-rebind...
comment by dytir · 2024-08-07 · in 0.0.0.0 Day: Exploiting Localhost APIs from the Browser -
…Host validation is preferable anyway [1] but the second problem still has bad implications. 1. https://github.com/nccgroup/singularity/wiki/Preventing-DNS-...
comment by dvzk · 2023-01-18 · in Tailscale bug allowed a person to share nodes from other tailnets without auth