{"repo":"nccgroup/singularity","free":true,"listed":false,"github":"https://github.com/nccgroup/singularity","clone":"git clone https://github.com/nccgroup/singularity.git","description":"A DNS rebinding attack framework.","language":"JavaScript","stars":1315,"topics":["dns-rebinding","dns","vulnerability","attack","iot"],"license":"MIT","category":"security-tools","readme_excerpt":"Singularity of Origin Recent updates: - NEW (2025-11-25) : Chrome release 142 added Local Network Access (LNA), which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access from Non-Secure Contexts. This temporarily allows access to resources on local networks from non-secure contexts, thus letting you experiment with DNS rebinding attacks a bit longer (until May 18, 2026) when using Chrome. - NEW (2025-05-19): Our demo site, rebind.it, has been upgraded to support IPv6 (commit 3c5ee9a). This is a breaking change for manual queries (outside of Singularity Manager UI) because the DNS query format has been modified. Please refer to How to Create Manual DNS Requests to Singularity of Origin for detailed instructions. Additionally, we periodically add new attack payloads; be sure to check them out. - (2023-04-27) Check out our blog post documenting the state of DNS rebinding for April 2023. We describe Local Network Access, a new draft W3C specification currently implemented in some browsers that aims to prevent DNS rebinding, and show two ways to bypass these restrictions. We also discuss the effects of WebRTC IP address leak mitigation, and DNS Bit 0x20 on DNS rebinding attacks. - (2020-03-30) New blog post investigating the impact of DoH on DNS rebinding attacks. TL;DR: DoH (DNS over HTTPS) has no effect on rebinding attacks and protections advertised","default_branch":null,"files":null,"tree":[],"storefront":"/r/nccgroup","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/nccgroup/singularity/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}