A webhook.site Alternative Built for Security Testing
Looking for a webhook.site alternative? webhook.press does live HTTP capture like webhook.site, and adds the offensive tooling pentesters actually need — DNS-based OOB, redirects and payload hosting.
What you get
- Live HTTP capture with real source IP
- DNS-based OOB for blind SSRF/RCE
- Redirects for SSRF filter and open-redirect testing
- Payload hosting for XSS and XXE
- Custom responses and valid HTTPS callbacks
- Free, no signup for the core tool
How it works
Open webhook.press and you instantly get a unique HTTPS URL — no signup, no configuration. Point any webhook, integration or HTTP client at it and every request appears in your browser in real time: the method, headers, query string, body and the sender’s source IP. You can set a custom response — status code, headers, body and delay — to mock a provider or reproduce edge cases, and share the URL with your team.
Under the hood it’s built for security testing as much as debugging. Each session unlocks an out-of-band toolkit — redirects for SSRF and open-redirect testing, DNS-based callbacks for blind vulnerabilities, and payload hosting for XSS and XXE — the same building blocks you’d reach for with Burp Collaborator, free and self-serve.
Built for pentesters and developers
Instant & free
A public HTTPS endpoint in one click, no account required. Your payload appears within a second.
Real source IP
Every request shows the sender’s IP — essential for confirming SSRF and tracing integrations, which in-browser-only tools can’t do.
Out-of-band ready
DNS callbacks, redirects and payload hosting for blind SSRF, XXE and filter-bypass testing.
FAQ
How is it different from webhook.site?
Same live capture, plus security-focused features webhook.site lacks: DNS-OOB, redirect tooling and payload hosting — closer to Burp Collaborator.
Is it free?
Yes — the core tool is free and self-serve.
Do I need to sign up?
No — the core tool is free and needs no account. Open it and start catching requests immediately.
Can I use it for SSRF and OOB testing?
Yes — that’s what sets it apart. DNS callbacks, redirects and payload hosting make it a self-serve Burp Collaborator alternative.
Try it now — free
No signup. Open the tool, grab your URL, and start catching requests. When you find something worth chasing, a real pentest is one click away.