SSRF bypass using DNS rebinding 

Thank you. It pays off all the time that I spent.

Thank you. Then do support by subscribing.

Thank you. Do subscribe and you will get more content.

Thanks and please do support by subscribing to my channel for more videos like these.

Yeah....It was an old video and I changed the volume settings in later/recent videos.

If there is an SSRF issue and if target is restricted to do internal ip scanning then you can use dns rebinding to bypass the restrictions. Even if they restricted aws metadata ip address also you can bypass it using dns rebinding.

@@DevSecHacker nuclei shows dns rebinding and the severity was high but I didn’t find ssrf yet.

What template did you used for this?

you are welcome.

In this bypass no need to change company settings, just bind two ip addresses(one is not restricted ip address like google ip and other is restricted ip address like localhost) for the same domain and pass the domain as a user input. For binding two ips to same domain you can use the dns rebinder service that i shown in the video.

@@DevSecHacker ok thanks 🙏

github.com/RajuGanapathiraju/VulnerableLabs/blob/main/ssrf_bypass.js