Glossary
Common terminologies and definitions used on BLACKBIRD Web App Pentesting Suite
Public IP
All our scans are executed on our cloud environment. This comes with several benefits, one of them is simplicity. During a pentesting engagement, your client may enforce an IP whitelist and reject any other incoming requests.
That’s why we make sure to report back the public IP of our scanner prior to executing a scan so that you have enough time to include it in the IP whitelist.
HTTP Requests
For enhanced visibility, our scanners will report back the amount of HTTP requests they’ve made. This value can also include any intercepted requests through our content discovery tool for example.
The content discovery scanner counts a page visit as an individual request but also each intercepted request (including external XHRs and media files like images, videos, and javascript files that are embedded inside the navigated page).
Random ID
A random ID is a uniquely generated 7-character string that is sent with each request by our scanners. The main objective is to allow you to trace back the scan that caused the out-of-band vulnerability to be triggered.
An example would be tracing back the scan that caused an HTTP pingback from your OOB server.