An attack that switches a DNS resolution result mid-attack to bypass the same-origin policy and make a browser access an internal network.
The attacker initially returns the IP of a server they control; once the browser trusts that origin, they switch the response to return an internal network address instead. This is exploited as a foothold for attacking devices exposed only internally, such as a router's admin panel.
© 2026 ITBGM