Web Hack List

Other nomination

DNS Rebinding for Scraping and Spamming

Third part of a DNS rebinding series: because search engines ignore the Host header and serve over plain HTTP, an attacker can rebind a domain and have visitors' own browsers scrape Google, defeating CAPTCHAs and IP blocking. The same IP diversity supports comment spamming, poll fraud and brute force from other people's addresses.

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.