Weaponizing DNS Takeover for Web Attacks

​This #Hackշաբթի we’re exploring how a compromised DNS server can be weaponized for advanced web attacks. While many vulnerabilities in web applications can be exploited directly, some require prior access to additional services.

​Our speaker, Ashot Navasardyan from Krisp, will show real-world attack scenarios where an attacker who has already taken over a DNS server inside a network can use it to carry out attacks like:
🔹 Cross-Site Scripting (XSS)
🔹 Server-Side Request Forgery (SSRF)
🔹 Same-Origin Policy (SOP) bypass

​Expect clear explanations, practical demos, and interactive discussions on how attackers can take advantage of DNS manipulation to break into web applications, and most importantly, how to protect against it.