https://baozongwi.xyz/tags/dns-rebinding/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/dns-rebinding-attack/Sun, 15 Feb 2026 22:08:20 +0800https://baozongwi.xyz/p/dns-rebinding-attack/有个日本的师傅文章写的很通俗易懂 https://blog.tokumaru.org/2022/05/dns-rebinding-protection.html 具体的修复方案也很简单，由于 ssrf 就是解析 URL 的实际 IP 去获取资源，所以只要我们默认只用第一次解析的能通过白名单的 IP 即可。 在网上找了很 …