Headless Browser · passage 7 of 8

DNS Rebinding

Text · Headless Browser/README.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

* [nccgroup/singularity](https://github.com/nccgroup/singularity) - A DNS rebinding attack framework. 1. Chrome will make 2 DNS requests: `A` and `AAAA` records * `AAAA` response with valid Internet IP * `A` response with internal IP 2. Chrome will connect in priority to the IPv6 (evil.net) 3. Close IPv6 listener just after first response 4. Open Iframe to evil.net 5. Chrome will attempt to connect to the IPv6 but as it will fail it will fallback to the IPv4 6. From top window, inject script into iframe to exfiltrate content

Every one of the 8 is a mark on the map. Named now: 1 to 8, reading order first.

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.