How Netsparker Hawk Finds SSRF and Out-of-Band Vulnerabilities This article explains in detail how the Netsparker web application security scanner uses the Netsparker Hawk vulnerability testing infrastructure to identify Server Side Request Forgery, blind, async and second order web application vulnerabilities.