// free tool

The Best Free RequestBin Alternative

RequestBin's public instance is gone. webhook.press is a free, self-serve replacement — instant URL, live capture with source IP — plus the OOB security tooling RequestBin never had.

What you get

  • Instant public HTTPS endpoint
  • Live capture: headers, body, query, IP
  • DNS-based OOB callbacks
  • Redirect and SSRF-bypass tooling
  • Payload hosting (XSS, XXE)
  • No signup, free core tool

How it works

Open webhook.press and you instantly get a unique HTTPS URL — no signup, no configuration. Point any webhook, integration or HTTP client at it and every request appears in your browser in real time: the method, headers, query string, body and the sender’s source IP. You can set a custom response — status code, headers, body and delay — to mock a provider or reproduce edge cases, and share the URL with your team.

Under the hood it’s built for security testing as much as debugging. Each session unlocks an out-of-band toolkit — redirects for SSRF and open-redirect testing, DNS-based callbacks for blind vulnerabilities, and payload hosting for XSS and XXE — the same building blocks you’d reach for with Burp Collaborator, free and self-serve.

Built for pentesters and developers

Instant & free

A public HTTPS endpoint in one click, no account required. Your payload appears within a second.

Real source IP

Every request shows the sender’s IP — essential for confirming SSRF and tracing integrations, which in-browser-only tools can’t do.

Out-of-band ready

DNS callbacks, redirects and payload hosting for blind SSRF, XXE and filter-bypass testing.

FAQ

Q

Why did RequestBin go away?

The public bin was retired and folded into Pipedream. webhook.press is a free, no-signup replacement for quick inspection and OOB testing.

Q

Can I use it in CI?

Yes — the endpoint and API work for automated and one-off testing.

Q

Do I need to sign up?

No — the core tool is free and needs no account. Open it and start catching requests immediately.

Q

Can I use it for SSRF and OOB testing?

Yes — that’s what sets it apart. DNS callbacks, redirects and payload hosting make it a self-serve Burp Collaborator alternative.

Try it now — free

No signup. Open the tool, grab your URL, and start catching requests. When you find something worth chasing, a real pentest is one click away.

Open webhook.press Book a pentest

Get in touch

Tell us what you'd like tested — we'll reply with scope and a fixed quote.