## https://sploitus.com/exploit?id=9C2B04AD-2784-5FAC-A62B-0DF323145FB0
# GlitchTip DNS rebinding gap PoC
This PoC models the DNS rebinding gap where validation resolves a hostname to a public IP, but the later HTTP connection resolves the same hostname to a private/loopback IP.
## Install
```sh
npm install
```
## Steps to reproduce
```sh
npx ts-node .\glitchtip-dns-rebinding-gap-poc.ts --host rebind.local.test --validation-ip 93.184.216.34 --connect-ip 127.0.0.1
```
1. Run the command above with a public `--validation-ip` and private/loopback `--connect-ip`.
2. Compare the two printed resolution phases.
## Expected vulnerable behavior
The script reports that validation appears safe while the connection target becomes private, reproducing the architectural gap.