DNS Rebinding: How Websites Attack Your Router
By [FILL IN], [FILL IN] · Last updated
DNS rebinding lets a malicious page reach devices on your local network. See how it works and how a DNS firewall blocks it.
The attack in brief
A malicious site first resolves to a public address, loads its script, then switches its DNS answer to a private address like 192.168.1.1. The browser now treats your router or camera as the same site and lets the script talk to it.
What is at risk
Routers, NAS boxes, printers, smart home hubs and development servers often trust the local network and have weak or no authentication.
The DNS fix
A DNS firewall refuses public domain answers that point to private or loopback ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.0/8 and their IPv6 equivalents). The rebinding step simply fails.