Vulnerabilities · InfosecFeed Brief
Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)
Vulnerabilities
What you need to know
It is pretty obvious that hostnames can replace IP addresses. Pretty much any software accepting an IP address will also accept a hostname as an argument. Last week, I wrote about scans for the cloud metadata service listening at 169.254.169.254. These scans attempted to exploit Server Side Request Forgery (SSRF) vulnerability. One way to prevent these…
Source transparency
Read the original report at SANS Internet Storm Center ↗
This is an InfosecFeed curated brief based on reporting from SANS Internet Storm Center. InfosecFeed does not claim ownership of the original reporting.