Expand description
§Phase 9: quarantined SSRF out-of-band probing
This legacy phase can deliver an explicitly configured out-of-band (OOB) callback URL through already observed query parameters. Delivery uses the scan’s shared, exact-origin, bounded HTTP authority. A completed request is recorded as typed probe evidence; it carries no security conclusion.
Callback collection is deliberately absent from the legacy contract. Until a host-owned verifier can provide nonce-correlated callback evidence, this phase emits an empty result. No default callback destinations or sensitive target payloads are compiled into this module.
Structs§
- Ssrf
Scanner - Legacy SSRF probe configuration.