Other nomination

Anti-DNS Pinning ( DNS Rebinding ) + Socket in FLASH

Kanatoko

Kanatoko shows Flash Player 9's ActionScript 3 Socket class combined with DNS rebinding hands an attacker a raw TCP socket inside the victim's browser: intranet port scanning, shellcode delivery, spam, proxying and defeat of any IP-based authentication. Java applets pin DNS by default, but not under LiveConnect or behind a proxy.

Record

Researcher

Kanatoko

In the archive

• Nominated for the 2007 Top 10 Web Hacking Techniques

Related sources

• Companion demonstration

Tags

• dns-rebinding
• flash
• sop-bypass
• same-origin-policy
• dns
• auth-bypass
• owasp-a01-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of Kanatoko, first published at the original source. Preserved copies are kept so the citation survives its host.