The Confused Deputy: The Agent with Too Many Keys
摘要
In Chapter 8 , we saw how DNS Rebinding tricks a web browser into acting as a malicious proxy, allowing an attacker to reach internal servers. But what happens when the attacker does not need to bypass the network perimeter? What happens when the attacker simply asks a highly privileged internal server to do the dirty work for them?