Outbound Interaction & OOB Detection

Purpose

Use this skill for outbound interaction and out-of-band validation when the hypothesis requires callback evidence rather than an immediate in-band response.

Primary use cases:

• SSRF callback confirmation
• Blind XSS beacons
• Blind XXE
• Webhook delivery validation
• DNS, HTTP, or HTTPS callback correlation
• Asynchronous server-side interaction proof
• Reverse-shell-adjacent egress testing where the goal is callback validation, not shell handling

Use an in-band validation skill instead when the finding can be confirmed fully in-band.

Operating Rules