4 ms·
Looks like a white hat audit from Snyk testing. Got flagged because oastify.com is a default Burp Collaborator server. They should be running a private npm rep
by nikcub 2y ago
Looks like a white hat audit from Snyk testing. Got flagged because oastify.com is a default Burp Collaborator server.
They should be running a private npm repo for tests (not difficult to override locally) and also their own collaborator server.
- Cthulhu_ 2y agoIt's not white hat because they actively extract data; if it was just to prove it worked they could've done a console.log, cause npm install to fail, or not extract a payload.
- that_guy_iain 2y agoThe data they extract is nothing sensitive and this way they can see how many hits they get. The more affected the bigger the headline for them.