DNS Rebinding Testing Environment

A Dockerized environment to execute SSRF via DNS rebinding; it contains the following:

• A container running rbndr; this is to allow DNS race conditions
• A container running a localhost site using Python's http.server; this is to receive SSRF hits
• A container running NodeJS with the default resolver set to rbndr (on localhost); this is to test the race condition against NodeJS code/libraries

(All of the containers have the same IP—which allows sending HTTP requests to the site container, or DNS queries to the rbndr container.)

So how do I use it?

1. Create the containers:

docker-compose up

2. Go into the node container:

docker exec -it rebinding_node_1 sh

3. The node container will have the vuln directory attached to /home/node/vuln; ALSO MAKE SURE YOU INSTALL THE NPM DEPENDENCIES OUTSIDE OF THE CONTAINER (npm install)

4. Do yo testing!

sh /home/node/vuln/infinite.sh /home/node/vuln/C0oki3s-ssrf/index.js

5. See yo results!

   

---

You can destroy the containers by running:

docker-compose down

Or you can just stop them:

docker-compose stop

And then start them again:

docker-compose start