Libraries tagged by dns-rebinding

Validate URLs and IP addresses against SSRF, DNS rebinding, and cloud-metadata attacks.

Go to Download

A Laravel package that protects outbound HTTP requests from SSRF (Server-Side Request Forgery): it validates that a URL's host resolves only to public IPs (denying private, reserved, loopback and link-local ranges by default), pins the connection to the validated IP to close the DNS-rebinding TOCTOU window, and performs safe GET requests that re-validate every redirect hop.

Go to Download

PSR-18 client for untrusted URLs: resolves the host, checks every address and pins the connection to the checked addresses

Go to Download

A secure DNS resolver library that prevents Time-of-Check to Time-of-Use (TOCTOU) and DNS Rebinding attacks following the AppSec Manifesto principles

Go to Download