Viewing profile — MalacodaV

Many of us will have been there: You're trying to recruit for a role, you're in the interview and you think this candidate is rocking it! They're knocking every question you ask ou…

This is the second part in a two-part series on DNS rebinding. The first part covered a real-world exploit using DNS rebinding. In this post, we introduce new techniques for achiev…

A new technique for performing DNS rebinding attacks in split-seconds against headless browsers to extract information from internal networks (like AWS metadata endpoints).