dns-rebinding-attacks

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references external security tools and repositories for DNS rebinding.
  • References the Singularity framework from NCC Group's GitHub repository.
  • Links to the whonow DNS rebinding service repository.
  • Mentions the rbndr.us utility service for DNS resolution manipulation.
  • [COMMAND_EXECUTION]: The skill provides instructions for setting up and running security tools.
  • Includes shell commands to clone, build, and execute the Singularity framework server using Go.
  • [DATA_EXFILTRATION]: Contains JavaScript code examples demonstrating data exfiltration techniques.
  • Shows how to use navigator.sendBeacon and fetch to transmit internal service data to external attacker-controlled endpoints as part of an exploit chain.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 02:02 AM