oast

An OOB interaction gathering server and client library

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

BOAST is a server designed to receive and report Out-of-Band Application Security Testing (OAST) reactions.

SQLMap wrapper that lets you use Interact.sh as a DNS server for exfiltrating data with zero configuration

Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.

Automated blind SSRF scanner with native PingBack.sh OAST correlation, persistent callbacks and exact injection tracking.

Multifunctional server with an offensive toolkit: OAST, Exfiltration, Pastebin, Automation, XSS Post-Exploitation, Honeypot

Attribute LLM web-tool infrastructure using OAST callbacks and provider-published IP ranges

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

Evidence-driven DAST platform for authorized web application security testing, with browser-assisted crawling, vulnerability verification, multi-tenant triage, AI analysis, and PDF reporting.

Burp style tool for free, runs on vps

A Python-based OAST scanner to automate the detection of Blind SSRF (via header injection & request-target) and identify potential Open Redirects using Interactsh.

DNS relay and exfiltration assessment tool for authorized red teaming and penetration testing. Evaluates corporate DNS resolvers for relay abuse.

Blind XSS detection built on interact.sh — per-field tokenized payloads, injection-point↔vulnerable-URL correlation, screenshot/DOM capture, and a persistent-session reverse proxy. Authorized testing only.

Lightweight HTTP request capture & inspection service

out-of-band application security testing

Scan web applications for blind SSRF vulnerabilities using automated payload injection and OAST correlation via the PingBack API.