Interactsh - An OOB Interaction Gathering Server And Client Library

Interactsh is an Open-Source Solution for Out of band Data Extraction, A tool designed to detect bugs that cause external interactions, For example - Blind SQLi, Blind CMDi, SSRF, etc.

Features

DNS/HTTP/SMTP Interaction support CLI Client / Web Dashboard support AES encryption with zero logging Automatic ACME based Wildcard TLS w/ Auto Renewal SELF Hosting version support

A hosted instance of the service with WEB UI is available at https://interact.projectdiscovery.io.

Note: As hosted version doesn't store anything locally, restarting server for maintenance / unexpected server crash / updates will result into loss of previous data.

Installing Interactsh Client

Interactsh Client requires go1.15+ to install successfully. Run the following command to get the repo -

Usage

This will display help for the tool. Here are all the switches it supports.

Flag Description Example

n	Number of interactable URLs to generate (default 1)	interactsh-client -n 2
persistent	Enables persistent interactsh sessions	interactsh-client persistent
poll-interval	Number of seconds between each poll request (default 5)	interactsh-client -poll-interval 1
url	URL of the interactsh server (default "hxxps://interact.sh")	interactsh-client -url hxxps://example.com
json	Show JSON output	interactsh-client -json
o	Store interaction logs to file	interactsh-client -o logs.txt
v	Show verbose interaction	interactsh-client -v

Running Interactsh Client

This will generate single URL that can be used for interaction.

Sending Interaction to Discord,Slack,Telegram with Notify

Setting up self-hosted instance
Click here for details

Start with setting up Debian box, Debian is required as you need to setup your own Name servers.

Navigate to https://dcc.godaddy.com/manage/{{domain}}/dns/hosts > Advanced Features > Host names, add ns1 and ns2 as hostnames with the IP of your server.

Navigate to https://dns.godaddy.com/{{domain}}/nameservers > Enter my own nameservers (advanced) > Add ns1.{{domain}} and ns2.{{domain}} as name servers.

Installing interactsh-server on your server.

Starting interactsh-server, to ensure server is always running in the background, make sure to start the server in the screen session.

Server setup should be completed with this, now client can be used to generate your own payloads.

Installing interactsh-client for using interactsh service. Running interactsh-client with self-hosted domain.

Acknowledgement

Interactsh is inspired from Burp Collaborator.



by the projectdiscovery team.