nccgroup / nccgroup/singularity
DNS Rebinding protection bypass.
Open
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 1.3k
- Forks
- 161
- PR merge metrics
- No merged PRs in 30d
Description
@gdncc Yo bro , would these weird IP formatting be useful in bypassing dns rebinding protection/filters ?
https://blog.dave.tf/post/ip-addr-parsing/
just like the CVE: 2020-26887
but more complicated.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the linked IP address parsing article and CVE-2020-26887, then inspect the repository's DNS rebinding protection entry points. Reproduce or disprove whether unusual IP formatting bypasses the protection, and define a focused fix and regression test if the bypass is confirmed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 18/100