Test browser access to hidden internal services.
What it does
Guides DNS rebinding tests that access internal services through a browser and document the setup, payload, timing, and collected data.
When to use it
Use when testing applications that trust DNS for origin checks, access internal services from browsers, or fetch attacker-controlled domains client-side when server-side SSRF is unavailable.
How to use it
Give it a DNS rebinding testing request; it works through the exploitation checklist and documents the infrastructure, payload, timing, and collected data.
Latest review
What you need · 0
No setup requirements listed.
Access · 2
This skill
exfil.attacker.com
Write
Sends captured data to an attacker
internal services
Read
Reads internal services through a browser