I just wanted to mention this because both OpenWRT and DD-WRT got mentioned in his presentation...
https://www.youtube.com/watch?v=0duYxPIx8gU
-RayRay-
Topic: External Hacking of OpenWRT using DNS Rebind
The content of this topic has been archived on 18 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.
Page 1 of 1
Neither at the time of this talk nor anytime after was OpenWrt vulnerable to this rebind attacks. LuCI already contained CSRF countermeasures back then and dnsmasq rebind protection was enabled as additional measure shortly after.
Does this mean that we are in safe?
The discussion might have continued from here.
Page 1 of 1