Webhook tester
Enter a webhook URL and the server sends a test request to it. Internal and loopback addresses are rejected. The client follows HTTP redirects, like most HTTP libraries do by default.
A public redirector is available at
http://open.cspshivam.com/redirect?url=
The webhook target is pinned to this site and
locked in the form; override the url field in the request body with an intercepting proxy.
Stuck? You've missed the flag a few times. The full solution — root cause, exact payload and fix — is on the walkthrough page.
Check the solution on the walkthrough page →This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of CSPSHIVAM Playground is not part of the target.