dref
A framework for exploiting DNS rebinding vulnerabilities to bypass Same-Origin Policy and attack internal networks from browsers.
What is dref?
dref is a DNS Rebinding Exploitation Framework designed for security researchers and penetration testers. It automates DNS rebinding attacks to bypass browser Same-Origin Policy and access internal network resources from compromised browsers. The framework handles the heavy lifting of DNS rebinding while providing built-in payloads for network discovery and data exfiltration.
Security researchers, penetration testers, and red team members who need to test web application security and bypass browser security controls during authorized security assessments.
dref provides a complete framework for DNS rebinding attacks with built-in functionality that eliminates the need to manually implement complex rebinding techniques. It offers ready-to-use payloads and automation that simplifies exploiting DNS rebinding vulnerabilities in real-world scenarios.
Overview
DNS Rebinding Exploitation Framework
Use Cases
Best For
- Testing web application security against DNS rebinding attacks
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
