Hookbox: Open-Source Self-Hosted Webhook Inbox With HMAC Verification and Replay
A developer named Artyom from Yerevan has released Hookbox, a self-hosted webhook inbox tool available on GitHub. The tool allows developers to capture incoming HTTP requests across any method, storing headers, query parameters, and body data for the last 100 events. Hookbox supports optional HMAC signature verification via X-Hub-Signature-256 and X-Signature headers, and lets users replay captured events to a target URL with SSRF protections in place. Sensitive headers such as Cookie and Authorization are redacted during storage to reduce security risks. The project can be deployed locally or on a VPS using a single Docker Compose command, and is aimed at developers who frequently integrate webhooks from services like Stripe or GitHub.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in