Interactsh is an Open-Source Solution for Out of band Data Extraction, A tool designed to detect bugs that cause external interactions, For example - Blind SQLi, Blind CMDi, SSRF, etc.

• DNS/HTTP/SMTP Interaction support
• CLI Client / Web Dashboard support
• AES encryption with zero logging
• Automatic ACME based Wildcard TLS w/ Auto Renewal
• SELF Hosting version support

A hosted instance of the service with WEB UI is available at https://interact.projectdiscovery.io.

Note: As hosted version doesn't store anything locally, restarting server for maintenance / unexpected server crash / updates will result into loss of previous data.

Interactsh Client requires go1.15+ to install successfully. Run the following command to get the repo -

▶ GO111MODULE=on go get -v github.com/projectdiscovery/interactsh/cmd/interactsh-client

interactsh-client -h

This will display help for the tool. Here are all the switches it supports.

This will generate single URL that can be used for interaction.

▶ interactsh-client    _       __                       __       __     (_)___  / /____  _________ ______/ /______/ /_   / / __ \/ __/ _ \/ ___/ __ '/ ___/ __/ ___/ __ \ / / / / / /_/  __/ /  / /_/ / /__/ /_(__  ) / / //_/_/ /_/\__/\___/_/   \__,_/\___/\__/____/_/ /_/ v0.0.1		projectdiscovery.io[INF] Listing 1 URL for OOB Testing[INF] c23b2la0kl1krjcrdj10cndmnioyyyyyn.interact.sh[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Received DNS interaction (A) from 172.253.226.100 at 2021-26-26 12:26[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Received DNS interaction (AAAA) from 32.3.34.129 at 2021-26-26 12:26[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Received HTTP interaction from 43.22.22.50 at 2021-26-26 12:26[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Received DNS interaction (MX) from 43.3.192.3 at 2021-26-26 12:26[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Received DNS interaction (TXT) from 74.32.183.135 at 2021-26-26 12:2   6[c23b2la0kl1krjcrdj10cndmnioyyyyyn] Received SMTP interaction from 32.85.166.50 at 2021-26-26 12:26

▶ interactsh-client | notify

1. Start with setting up Debian box, Debian is required as you need to setup your own Name servers.

2. Navigate to https://dcc.godaddy.com/manage/{{domain}}/dns/hosts > Advanced Features > Host names, add ns1 and ns2 as hostnames with the IP of your server.

3. Navigate to https://dns.godaddy.com/{{domain}}/nameservers > Enter my own nameservers (advanced) > Add ns1.{{domain}} and ns2.{{domain}} as name servers.

4. Installing interactsh-server on your server.

GO111MODULE=on go get -v github.com/projectdiscovery/interactsh/cmd/interactsh-server

5. Starting interactsh-server, to ensure server is always running in the background, make sure to start the server in the screen session.

interactsh-server -domain {{Domain}} -hostmaster [email protected]{{Domain}} -ip {{Server_IP}}

interactsh-server -domain example.com -hostmaster [email protected] -ip XX.XX.XX.XX

Server setup should be completed with this, now client can be used to generate your own payloads.

6. Installing interactsh-client for using interactsh service.

GO111MODULE=on go get -v github.com/projectdiscovery/interactsh/cmd/interactsh-client

7. Running interactsh-client with self-hosted domain.

interactsh-client -url https://example.com

Interactsh is inspired from Burp Collaborator.