這大概是我看到解釋DNS Rebinding最清楚的文章The Good Old DNS Rebinding.節錄下圖馬上理解為什麼DNS Rebinding可以衍生出這麼多其他的攻擊, 根本是進攻萬花筒 而關於這個已經被公開揭露的攻擊手法在2021的現在還能持續存活, 就在於DNS Rebinding還是有其正當用途. 像是在處理高流量網站時的Load Balancing, 還須仰賴DNS的Short TTL(Time To Live)設定.
DNS Tunneling: how DNS can be (ab)used by malicious actorsDNS is a critical foundation of the Internet that makes it possible to get to websites without entering numerical IP addresses. The power that makes DNS beneficial for everyone also creates potential for abuse. Unit 42 researchers explain how attackers can abuse DNS to hide their tracks and steal da… 感覺上不是一個可以單獨使出的招式, 攻擊者必須掌控DNS server才能發動.中間只要有個Big-IP F5或是任何過濾DNS traffic這攻擊就GG了. 不過實際上的攻擊總是各種組合拳, 所以還是不能小看...