Summary
This is a thorough playbook for DNS rebinding attacks, the client-side technique where you control DNS to make a browser resolve your domain to an internal IP while respecting same-origin policy. It covers the core mechanics (TTL manipulation, browser cache bypass via subdomains or multiple A records), attack variants including WebSocket rebinding and the hybrid TOCTOU server-side case, and high-value targets like cloud metadata services at 169.254.169.254 or internal Docker APIs. The skill includes practical tool references like Singularity and rbndr.us for zero-setup testing. Use this when you need to reach internal services from a browser context where traditional SSRF won't work, or when testing applications that trust DNS resolution for security decisions.
Install to Claude Code
npx -y skills add yaklang/hack-skills --skill dns-rebinding-attacks --agent claude-codeInstalls into .claude/skills of the current project.
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →Files
SKILL.md
Select a file.
Featured
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →
