# pingback.sh

> Generate HTTP, DNS, SMTP and Blind XSS listeners for SSRF, XXE, Blind XSS and bug bounty testing.

Generate HTTP, DNS, SMTP and Blind XSS listeners for SSRF, XXE, Blind XSS and bug bounty testing. No signup required.

## Facts
- Website: https://pingback.sh
- Pricing: freemium
- Categories: Security & Privacy, Developer Tools
- LotsDirectory page: https://lots.directory/products/pingback-sh
- Listing state: Unclaimed. We listed this product from its public website, and its owner has not claimed it yet.

## Detailed info

## What is pingback.sh?

pingback.sh is an out-of-band security testing platform. It generates listeners across HTTP, DNS, SMTP, and Blind XSS to capture network callbacks during vulnerability assessments and bug bounty research.

## What pingback.sh does

The system provides unified listener endpoints to detect out-of-band interactions from vulnerabilities like SSRF, blind XXE, Blind XSS, and Log4j injections. When a payload triggers a network request, pingback.sh logs the callback with contextual metadata including request headers, body content, source IP, country, ASN, and user-agent. It supplies ready-to-use payloads for webhooks, file uploads, image proxies, and email forms, alongside a Firefox add-on for form discovery. Captured events trigger email, Discord, or Telegram notifications. Free listeners capture up to 5 callbacks, while Pro keys provide unlimited hunting for 30 days.

## Who pingback.sh is for

It is built for bug bounty hunters, penetration testers, and security researchers who need out-of-band infrastructure to detect and prove blind vulnerabilities.

## How pingback.sh works

Researchers generate a unique listener URL and paste corresponding HTTP, DNS, or XSS payloads into target input fields. When the target server or client processes the payload, it contacts the listener, recording proof of the vulnerability in a live web dashboard.

## Key features

- Multi-protocol listener capturing HTTP, HTTPS, DNS, SMTP, and Blind XSS callbacks
- Live capture dashboard displaying request headers, body data, source IP, ASN, and user-agent
- Pre-built payload library for SSRF, Log4j JNDI, blind injections, and file upload fields
- Alert integrations delivering notifications via email, Discord, and Telegram
- Free Firefox add-on to scan web pages and inject callback payloads into forms
- Full API access for automated listener deployment and callback verification
- Free listener access supporting the first 5 callbacks with 30-day dashboard retention
- Pro access key offering 30 days of unlimited listeners and hits with 360-day capture history

## Pricing

As listed on pingback.sh, checked 14 October 2026. Prices can change; see the site for current terms.

- Free: zsh for the first 5 callbacks, 30 days of listener access, and optional email alerts
- Pro: for a 30-day access key with unlimited listeners, hits, API access, and 360 days retention

## Facts from pingback.sh, checked 14 October 2026

Written from pingback.sh's own website ([Homepage](https://pingback.sh/), [Pricing](https://pingback.sh/pricing), [Features](https://pingback.sh/usecases), [Docs](https://pingback.sh/docs)). The maker can claim this listing to edit it.

## FAQ

### What protocols can pingback.sh listeners monitor?
Listeners capture incoming traffic across HTTP, HTTPS, DNS, SMTP, and Blind XSS.

### What vulnerabilities can be tested with out-of-band listeners?
The platform tests blind vulnerabilities including SSRF, blind XXE, Blind XSS, and Log4j injections.

### How is access authenticated without an account or password?
Access is granted via a unique secret dashboard URL generated when the listener is created.

### What payment methods are supported for Pro access?
Users send in BTC, ETH or USDT, or pay through PayPal with no card details shared.

---
Source: https://lots.directory/products/pingback-sh · Machine-readable context by LotsDirectory.