Learn about running Interactsh with examples and detailed output
interact-client
generates a unique payload that can be used for Out-Of-Band (OOB) testing with minimal interactin in the output.
interactsh-client
with -sf, -session-file
flag can be used to store/read the current session information from user defined file. This functionality is useful to resume the same session to poll the interactions even after the client gets stopped or closed.
interactsh-client
in verbose mode (v) allows you to to see the whole request and response, along with an output file to analyze afterwards.
server
flag, interactsh-client
can be configured to connect with a self-hosted Interactsh server, this flag accepts single or multiple server separated by comma.
interactsh-client
:
token
flag, interactsh-client
can connect to a self-hosted Interactsh server that is protected with authentication.
Options
> OAST
> General
menu.Use Permanent Database
option, you can review interactions that occurred after ZAP was terminated.https://dcc.godaddy.com/manage/{{domain}}/dns/hosts
ns1
, ns2
with your SERVER_IP
as valuehttps://dns.godaddy.com/{{domain}}/nameservers
ns1.INTERACTSH_DOMAIN
, ns2.INTERACTSH_DOMAIN
interactsh-server
on your VPS
interactsh-server
interactsh-server
with default settings. For example, ip
and listen-ip
flags set with the Public IP address of the system when possible.
interactsh-server
that are not enabled by default and are intended to be used only by self-hosted servers.
interactsh-server
might require custom ports for services if the default ones are already busy. If this is the case but still default ports are required as part of the payload, itβs possible to configure interactsh-server
behind a reverse proxy, by port-forwarding HTTP/TCP/UDP based services via http/stream
proxy directive (proxy_pass
).
interactsh-server
essential services run on the following ports:
-http-index
flag.
{DOMAIN}
placeholder is also supported in index file to replace with server domain name.
-http-directory
flag can be used which accepts diretory as input and files are served under /s/
directory.
-dr
or -dynamic-resp
flag.
The following query parameter names are supported - body
, header
, status
and delay
. Multiple header
parameters can be specified to set multiple headers.
Note:
wildcard
interaction for configured Interactsh domain wildcard
flag can be used with implicit authentication protection via the auth
flag if the token
flag is omitted.
ldap
flag can be used for complete logging.
cidl
and cidn
flags to make shorter when required with self-hosted interacsh server.
cert
and privkey
flag can be used to provider required certificate files.
Note: To utilize all of the functionality of the SSL protocol, a wildcard certificate is mandatory.
-ftp
flag and is recommended for self-hosted instances only. The FTP agent simulates a fully-functional FTP server agent with authentication that captures authentications with every file operation. By default, the agent listens on port 21 (this can be changed with the -ftp-port
flag) and lists in read-only mode the content of the OS default temporary directory (customizable with the -ftp-dir
option).
Example of starting the FTP daemon and capturing a login interaction:
-smb
flag enables the Samba protocol (only for self-hosted instances). The samba protocol uses impacket smbserver
class to simulate a samba daemon share listening on port 445
unless changed by the -smb-port
flag. When enabled, interactsh executes under the hoods the script smb_server.py
. Hence Python3 and impacket dependencies are required.
Example of enabling the samba server:
Responder-Session.log
in the temp folder. To use it on a self-hosted instance, itβs necessary first to build the docker container and tag it as interactsh
(docker daemon must be configured correctly and with port forwarding capabilities):