dns-rebinding-attacks
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external security tools and repositories for DNS rebinding.
- References the Singularity framework from NCC Group's GitHub repository.
- Links to the
whonowDNS rebinding service repository. - Mentions the
rbndr.usutility service for DNS resolution manipulation. - [COMMAND_EXECUTION]: The skill provides instructions for setting up and running security tools.
- Includes shell commands to clone, build, and execute the Singularity framework server using Go.
- [DATA_EXFILTRATION]: Contains JavaScript code examples demonstrating data exfiltration techniques.
- Shows how to use
navigator.sendBeaconandfetchto transmit internal service data to external attacker-controlled endpoints as part of an exploit chain.
Audit Metadata