Awesome-Mirrors/awesome-web-security
1
0
Fork 0
mirror of https://github.com/qazbnm456/awesome-web-security.git synced 2024-10-01 03:15:46 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #44 from radekk/master

Browse Source 
Adding new section and resources for DNS Rebinding attack
This commit is contained in:
Boik 2019-09-15 12:24:08 -04:00 committed by GitHub
commit 06ab8f8bea
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 51 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
README-jp.md
View File

@ -50,6 +50,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Web Shell](#web-shell) - [Web Shell](#web-shell)
- [OSINT](#osint) - [OSINT](#osint)
- [Books](#books) - [Books](#books)
- [DNS Rebinding](#dns-rebinding)
- [Evasions](#evasions) - [Evasions](#evasions)
- [CSP](#evasions-csp) - [CSP](#evasions-csp)
- [WAF](#evasions-waf) - [WAF](#evasions-waf)
@ -95,6 +96,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Webshell](#tools-webshell) - [Webshell](#tools-webshell)
- [Disassembler](#tools-disassembler) - [Disassembler](#tools-disassembler)
- [Decompiler](#tools-decompiler) - [Decompiler](#tools-decompiler)
- [DNS Rebinding](#tools-dns-rebinding)
- [Others](#tools-others) - [Others](#tools-others)
- [Social Engineering Database](#social-engineering-database) - [Social Engineering Database](#social-engineering-database)
- [Blogs](#blogs) - [Blogs](#blogs)
@ -295,10 +297,17 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [102 Deep Dive in the Dark Web OSINT Style Kirby Plessas](https://www.youtube.com/watch?v=fzd3zkAI_o4) - Presented by [@kirbstr](https://twitter.com/kirbstr). - [102 Deep Dive in the Dark Web OSINT Style Kirby Plessas](https://www.youtube.com/watch?v=fzd3zkAI_o4) - Presented by [@kirbstr](https://twitter.com/kirbstr).
- [The most complete guide to finding anyone’s email](https://www.blurbiz.io/blog/the-most-complete-guide-to-finding-anyones-email) - Written by [Timur Daudpota](https://www.blurbiz.io/). - [The most complete guide to finding anyone’s email](https://www.blurbiz.io/blog/the-most-complete-guide-to-finding-anyones-email) - Written by [Timur Daudpota](https://www.blurbiz.io/).
<a name="books"></a>
### Books ### Books
- [XSS Cheat Sheet - 2018 Edition](https://leanpub.com/xss) - Written by [@brutelogic](https://twitter.com/brutelogic). - [XSS Cheat Sheet - 2018 Edition](https://leanpub.com/xss) - Written by [@brutelogic](https://twitter.com/brutelogic).
<a name="dns-rebinding"></a>
### DNS Rebinding
- [Attacking Private Networks from the Internet with DNS Rebinding](https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325) - Written by [@brannondorsey](https://medium.com/@brannondorsey)
- [Hacking home routers from the Internet](https://medium.com/@radekk/hackers-can-get-access-to-your-home-router-1ddadd12a7a7) - Written by [@radekk](https://medium.com/@radekk)
## Evasions ## Evasions
<a name="evasions-csp"></a> <a name="evasions-csp"></a>
@ -662,6 +671,14 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [CFR](http://www.benf.org/other/cfr/) - Another java decompiler by [@LeeAtBenf](https://twitter.com/LeeAtBenf). - [CFR](http://www.benf.org/other/cfr/) - Another java decompiler by [@LeeAtBenf](https://twitter.com/LeeAtBenf).
<a name="tools-dns-rebinding"></a>
### DNS Rebinding
- [DNS Rebind Toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) - DNS Rebind Toolkit is a frontend JavaScript framework for developing DNS Rebinding exploits against vulnerable hosts and services on a local area network (LAN) by [@brannondorsey](https://github.com/brannondorsey)
- [dref](https://github.com/mwrlabs/dref) - DNS Rebinding Exploitation Framework. Dref does the heavy-lifting for DNS rebinding by [@mwrlabs](https://github.com/mwrlabs)
- [Singularity of Origin](https://github.com/nccgroup/singularity) - It includes the necessary components to rebind the IP address of the attack server DNS name to the target machine's IP address and to serve attack payloads to exploit vulnerable software on the target machine by [@nccgroup](https://github.com/nccgroup)
- [Whonow DNS Server](https://github.com/brannondorsey/whonow) - A malicious DNS server for executing DNS Rebinding attacks on the fly by [@brannondorsey](https://github.com/brannondorsey)
<a name="tools-others"></a> <a name="tools-others"></a>
### Others ### Others

17
README-zh.md
View File

@ -50,6 +50,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Web Shell](#web-shell) - [Web Shell](#web-shell)
- [OSINT](#osint) - [OSINT](#osint)
- [Books](#books) - [Books](#books)
- [DNS Rebinding](#dns-rebinding)
- [Evasions](#evasions) - [Evasions](#evasions)
- [CSP](#evasions-csp) - [CSP](#evasions-csp)
- [WAF](#evasions-waf) - [WAF](#evasions-waf)
@ -95,6 +96,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Webshell](#tools-webshell) - [Webshell](#tools-webshell)
- [Disassembler](#tools-disassembler) - [Disassembler](#tools-disassembler)
- [Decompiler](#tools-decompiler) - [Decompiler](#tools-decompiler)
- [DNS Rebinding](#tools-dns-rebinding)
- [Others](#tools-others) - [Others](#tools-others)
- [Social Engineering Database](#social-engineering-database) - [Social Engineering Database](#social-engineering-database)
- [Blogs](#blogs) - [Blogs](#blogs)
@ -315,6 +317,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [102 Deep Dive in the Dark Web OSINT Style Kirby Plessas](https://www.youtube.com/watch?v=fzd3zkAI_o4) - Presented by [@kirbstr](https://twitter.com/kirbstr). - [102 Deep Dive in the Dark Web OSINT Style Kirby Plessas](https://www.youtube.com/watch?v=fzd3zkAI_o4) - Presented by [@kirbstr](https://twitter.com/kirbstr).
- [The most complete guide to finding anyone’s email](https://www.blurbiz.io/blog/the-most-complete-guide-to-finding-anyones-email) - Written by [Timur Daudpota](https://www.blurbiz.io/). - [The most complete guide to finding anyone’s email](https://www.blurbiz.io/blog/the-most-complete-guide-to-finding-anyones-email) - Written by [Timur Daudpota](https://www.blurbiz.io/).
<a name="books"></a>
### Books ### Books
- [Security Geek 2016 - Part. A](http://bobao.360.cn/download/book/security-geek-2016-A.pdf) - Written by [360网络攻防实验室](https://weibo.com/360adlab). - [Security Geek 2016 - Part. A](http://bobao.360.cn/download/book/security-geek-2016-A.pdf) - Written by [360网络攻防实验室](https://weibo.com/360adlab).
@ -325,6 +328,12 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Security Geek 2017 - Q4](https://static.anquanke.com/download/b/security-geek-2017-q4.pdf) - Written by [360网络攻防实验室](https://weibo.com/360adlab). - [Security Geek 2017 - Q4](https://static.anquanke.com/download/b/security-geek-2017-q4.pdf) - Written by [360网络攻防实验室](https://weibo.com/360adlab).
- [XSS Cheat Sheet - 2018 Edition](https://leanpub.com/xss) - Written by [@brutelogic](https://twitter.com/brutelogic). - [XSS Cheat Sheet - 2018 Edition](https://leanpub.com/xss) - Written by [@brutelogic](https://twitter.com/brutelogic).
<a name="dns-rebinding"></a>
### DNS Rebinding
- [Attacking Private Networks from the Internet with DNS Rebinding](https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325) - Written by [@brannondorsey](https://medium.com/@brannondorsey)
- [Hacking home routers from the Internet](https://medium.com/@radekk/hackers-can-get-access-to-your-home-router-1ddadd12a7a7) - Written by [@radekk](https://medium.com/@radekk)
## Evasions ## Evasions
<a name="evasions-csp"></a> <a name="evasions-csp"></a>
@ -706,6 +715,14 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [CFR](http://www.benf.org/other/cfr/) - Another java decompiler by [@LeeAtBenf](https://twitter.com/LeeAtBenf). - [CFR](http://www.benf.org/other/cfr/) - Another java decompiler by [@LeeAtBenf](https://twitter.com/LeeAtBenf).
<a name="tools-dns-rebinding"></a>
### DNS Rebinding
- [DNS Rebind Toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) - DNS Rebind Toolkit is a frontend JavaScript framework for developing DNS Rebinding exploits against vulnerable hosts and services on a local area network (LAN) by [@brannondorsey](https://github.com/brannondorsey)
- [dref](https://github.com/mwrlabs/dref) - DNS Rebinding Exploitation Framework. Dref does the heavy-lifting for DNS rebinding by [@mwrlabs](https://github.com/mwrlabs)
- [Singularity of Origin](https://github.com/nccgroup/singularity) - It includes the necessary components to rebind the IP address of the attack server DNS name to the target machine's IP address and to serve attack payloads to exploit vulnerable software on the target machine by [@nccgroup](https://github.com/nccgroup)
- [Whonow DNS Server](https://github.com/brannondorsey/whonow) - A malicious DNS server for executing DNS Rebinding attacks on the fly by [@brannondorsey](https://github.com/brannondorsey)
<a name="tools-others"></a> <a name="tools-others"></a>
### Others ### Others

17
README.md
View File

@ -50,6 +50,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Web Shell](#web-shell) - [Web Shell](#web-shell)
- [OSINT](#osint) - [OSINT](#osint)
- [Books](#books) - [Books](#books)
- [DNS Rebinding](#dns-rebinding)
- [Evasions](#evasions) - [Evasions](#evasions)
- [CSP](#evasions-csp) - [CSP](#evasions-csp)
- [WAF](#evasions-waf) - [WAF](#evasions-waf)
@ -95,6 +96,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Webshell](#tools-webshell) - [Webshell](#tools-webshell)
- [Disassembler](#tools-disassembler) - [Disassembler](#tools-disassembler)
- [Decompiler](#tools-decompiler) - [Decompiler](#tools-decompiler)
- [DNS Rebinding](#tools-dns-rebinding)
- [Others](#tools-others) - [Others](#tools-others)
- [Social Engineering Database](#social-engineering-database) - [Social Engineering Database](#social-engineering-database)
- [Blogs](#blogs) - [Blogs](#blogs)
@ -292,10 +294,17 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [102 Deep Dive in the Dark Web OSINT Style Kirby Plessas](https://www.youtube.com/watch?v=fzd3zkAI_o4) - Presented by [@kirbstr](https://twitter.com/kirbstr). - [102 Deep Dive in the Dark Web OSINT Style Kirby Plessas](https://www.youtube.com/watch?v=fzd3zkAI_o4) - Presented by [@kirbstr](https://twitter.com/kirbstr).
- [The most complete guide to finding anyone’s email](https://www.blurbiz.io/blog/the-most-complete-guide-to-finding-anyones-email) - Written by [Timur Daudpota](https://www.blurbiz.io/). - [The most complete guide to finding anyone’s email](https://www.blurbiz.io/blog/the-most-complete-guide-to-finding-anyones-email) - Written by [Timur Daudpota](https://www.blurbiz.io/).
<a name="books"></a>
### Books ### Books
- [XSS Cheat Sheet - 2018 Edition](https://leanpub.com/xss) - Written by [@brutelogic](https://twitter.com/brutelogic). - [XSS Cheat Sheet - 2018 Edition](https://leanpub.com/xss) - Written by [@brutelogic](https://twitter.com/brutelogic).
<a name="dns-rebinding"></a>
### DNS Rebinding
- [Attacking Private Networks from the Internet with DNS Rebinding](https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325) - Written by [@brannondorsey](https://medium.com/@brannondorsey)
- [Hacking home routers from the Internet](https://medium.com/@radekk/hackers-can-get-access-to-your-home-router-1ddadd12a7a7) - Written by [@radekk](https://medium.com/@radekk)
## Evasions ## Evasions
<a name="evasions-csp"></a> <a name="evasions-csp"></a>
@ -657,6 +666,14 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [CFR](http://www.benf.org/other/cfr/) - Another java decompiler by [@LeeAtBenf](https://twitter.com/LeeAtBenf). - [CFR](http://www.benf.org/other/cfr/) - Another java decompiler by [@LeeAtBenf](https://twitter.com/LeeAtBenf).
<a name="tools-dns-rebinding"></a>
### DNS Rebinding
- [DNS Rebind Toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) - DNS Rebind Toolkit is a frontend JavaScript framework for developing DNS Rebinding exploits against vulnerable hosts and services on a local area network (LAN) by [@brannondorsey](https://github.com/brannondorsey)
- [dref](https://github.com/mwrlabs/dref) - DNS Rebinding Exploitation Framework. Dref does the heavy-lifting for DNS rebinding by [@mwrlabs](https://github.com/mwrlabs)
- [Singularity of Origin](https://github.com/nccgroup/singularity) - It includes the necessary components to rebind the IP address of the attack server DNS name to the target machine's IP address and to serve attack payloads to exploit vulnerable software on the target machine by [@nccgroup](https://github.com/nccgroup)
- [Whonow DNS Server](https://github.com/brannondorsey/whonow) - A malicious DNS server for executing DNS Rebinding attacks on the fly by [@brannondorsey](https://github.com/brannondorsey)
<a name="tools-others"></a> <a name="tools-others"></a>
### Others ### Others