🎯 DNS rebinding

The items that name it 7

• AI Agent Hacking Writeups
  repoas techniques2026-09-17
• Flowsint - OSINT Framework
  repoas classification.key entities2026-07-31
• Using Claude’s Security Review Skill in Claude Code
  articleas classification.key entities2026-07-29
• AI Security Briefing
  advisoryas techniques2026-07-13

  Attacker-controlled rebinding DNS name returns a public/global IP on the guard's first getaddrinfo lookup (passes validation) and returns 169.254.169.254 / an internal IP on the second getaddrinfo lookup at connect time, so the socket connects to the internal address

• Pipelock
  repoas techniques2026-06-14

  Protected against via DNS SSRF and rebinding protection in the scanner pipeline; tokenless loopback listeners reject DNS-rebound and wrong-port Host authorities

• The Vulnerable MCP Project — MCP vulnerability database
  repoas techniques

  Malicious websites pivot to locally running MCP servers/agents bypassing browser Same-Origin Policy (seen in Vet MCP, Coder Agent API, Neo4j MCP, MCP Inspector, and unpatched SDKs)

• DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
  advisoryas classification.key entities