Website scanning feature
Some vulnerabilities leave no visible trace in the page. The application quietly contacts another system and the response looks normal. Out of band security testing, also called OAST, uses a controlled callback endpoint so a supported test can show that the target reached out. ScanTitan uses correlated DNS and HTTPS callbacks to help detect selected blind SSRF and XXE cases in eligible active website scans.
Start with a free account and see the website scan options. Registering does not activate paid features.
See website scan optionsHow callbacks workIn many injection flaws the application shows you the result. In a blind flaw it does not. A server-side request forgery can make a server fetch an internal or external address without showing the response, and an XML external entity flaw can make a parser load a resource the user never sees.
With nothing visible to compare, a scanner needs another way to know the target acted. An out of band callback gives that proof: the target is made to contact a system the scanner controls, and the contact itself is the evidence. Learn more about SSRF and XXE.
Tokens and target details are removed from any evidence example, and test payloads are not published.
It is a way to detect blind vulnerabilities. A test makes the target contact a controlled endpoint, and the callback is the evidence.
OAST means out of band application security testing, the same technique described here.
Selected blind SSRF and XXE cases in eligible active website scans.
No. Imported API scans do not use OAST.
No. It supports selected cases only.
No. The absence of a callback does not prove that a flaw is absent.
Active tests send requests to the target. Use scan budgets and only scan sites you own or are authorized to test.
Create a free account and review which scan profiles and plans fit your website.
See website scan optionsCompare plansThese ScanTitan features work alongside this one.
