13

Github GitHub - projectdiscovery/interactsh: An OOB interaction gathering server...

 3 years ago
source link: https://github.com/projectdiscovery/interactsh
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

Interactsh

An OOB interaction gathering server and client library

Features • Installation • Usage • Run Interactsh • Self-Hosting • Join Discord

Interactsh is an Open-Source Solution for Out of band Data Extraction, A tool designed to detect bugs that cause external interactions, For example - Blind SQLi, Blind CMDi, SSRF, etc.

Features

  • DNS/HTTP/SMTP Interaction support
  • CLI Client / Web Dashboard support
  • AES encryption with zero logging
  • Automatic ACME based Wildcard TLS w/ Auto Renewal
  • SELF Hosting version support

A hosted instance of the service with WEB UI is available at https://interact.projectdiscovery.io

Installing Interactsh Client

Interactsh Client requires go1.15+ to install successfully. Run the following command to get the repo -

▶ GO111MODULE=on go get -v github.com/projectdiscovery/interactsh/cmd/interactsh-client

Usage

interactsh-client -h

This will display help for the tool. Here are all the switches it supports.

Flag Description Example n Number of interactable URLs to generate (default 1) interactsh-client -n 2 persistent Enables persistent interactsh sessions interactsh-client persistent poll-interval Number of seconds between each poll request (default 5) interactsh-client -poll-interval 1 url URL of the interactsh server (default "hxxps://interact.sh") interactsh-client -url hxxps://example.com json Show JSON output interactsh-client -json o Store interaction logs to file interactsh-client -o logs.txt v Show verbose interaction interactsh-client -v

Running Interactsh Client

This will generate single URL that can be used for interaction.

▶ interactsh-client

    _       __                       __       __  
   (_)___  / /____  _________ ______/ /______/ /_ 
  / / __ \/ __/ _ \/ ___/ __ '/ ___/ __/ ___/ __ \
 / / / / / /_/  __/ /  / /_/ / /__/ /_(__  ) / / /
/_/_/ /_/\__/\___/_/   \__,_/\___/\__/____/_/ /_/ v0.0.1

		projectdiscovery.io

[INF] Listing 1 URL for OOB Testing
[INF] c23b2la0kl1krjcrdj10cndmnioyyyyyn.interact.sh

[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Recieved DNS interaction (A) from 172.253.226.100 at 2021-26-26 12:26
[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Recieved DNS interaction (AAAA) from 32.3.34.129 at 2021-26-26 12:26
[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Recieved HTTP interaction from 43.22.22.50 at 2021-26-26 12:26
[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Recieved DNS interaction (MX) from 43.3.192.3 at 2021-26-26 12:26
[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Recieved DNS interaction (TXT) from 74.32.183.135 at 2021-26-26 12:26
[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Recieved SMTP interaction from 32.85.166.50 at 2021-26-26 12:26

Sending Interaction to Discord,Slack,Telegram with Notify

▶ interactsh-client | notify

Setting up self-hosted instance

Click here for details

GO111MODULE=on go get -v github.com/projectdiscovery/interactsh/cmd/interactsh-client

interactsh-client -url https://example.com

Acknowledgement

Interactsh is inspired from Burp Collaborator.

License

Interactsh is distributed under MIT License and made with black_heart by the projectdiscovery team.


report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK