DNS Rebinding protection
See original GitHub issueHi, I’m an independent security researcher and author of host-validation
, an NPM module for protecting Express.js servers from DNS rebinding attacks via host header validation. I’ve done a fair amount of research on the subject and I think DNS rebinding protection through header validation would be a perfect addition to helmet. I’m happy to spearhead this effort if there is interest. I’m willing to write a PR with updates to the lib, tests, and documentation, pending discussion. This is an amazing project and I’d like to contribute a small bit to make it even better.
Issue Analytics
- State:
- Created 5 years ago
- Reactions:1
- Comments:6 (4 by maintainers)
Top Results From Across the Web
DNS rebinding - Wikipedia
DNS rebinding is a method of manipulating resolution of domain names that is commonly used as a form of computer attack. In this...
Read more >What is DNS Rebinding Protection? - NextDNS Help Center
DNS rebinding is a method of manipulating resolution of domain names that is commonly used as a form of computer attack.
Read more >DNS Rebinding Attack: How Malicious Websites ... - Unit 42
DNS rebinding allows attackers to take advantage of web-based consoles to exploit internal networks by abusing the domain name system.
Read more >DNS Rebinding Protections | pfSense Documentation
pfSense® software includes built in methods of protection against DNS rebinding attacks. DNS rebinding attack protection is active by default.
Read more >[Technical] The pros and cons of DNS Rebinding protection
Rebind Protection in DNS Resolvers / Routers filter out (all or some of) the local IP addresses in responses from DNS requests to...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Sounds good! I’ll make pull requests for these changes and @-mention you on both.
Closing this issue now that I’ve addressed the action items. Thanks for bringing this to my attention!