awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
projectdiscovery avatar

projectdiscovery/interactsh

0
View on GitHub↗

Interactsh

Interactsh is an out-of-band security testing framework and interaction server designed to detect vulnerabilities such as server side request forgery and blind injections. It functions as a multi-protocol interaction collector that captures DNS, HTTP, and SMTP requests to verify outbound communication from remote applications.

The project provides a self-hosted interaction gateway for managing unique payloads and gathering network interactions across multiple domains. It distinguishes itself through the ability to simulate various network protocols and response behaviors, including the routing of requests to cloud metadata services to identify specific vulnerabilities.

The system covers a broad range of capabilities including automated SSL certificate management via ACME for wildcard domains, real-time event notifications through webhooks and third-party platforms, and the hosting of static payloads for injection testing. It also includes mechanisms for session state persistence and query-driven response control to manage how the server handles incoming requests.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI
app.interactsh.com
↗

Features

  • Out-of-Band Callback Servers - Provides a dedicated server to capture asynchronous network callbacks for detecting OOB vulnerabilities like SSRF.
  • Out-of-Band Interaction Monitoring - Captures asynchronous network callbacks across multiple protocols to identify blind vulnerabilities.
  • Interaction Capture Servers - Provides a self-hosted server for managing unique payloads and capturing interactions across multiple domains.
  • SSRF Metadata Endpoint Resolvers - Identifies server-side request forgery by resolving DNS records to cloud metadata IP addresses.
  • Interaction Gateways - Ships a self-hosted gateway for managing security payloads and collecting real-time interaction triggers.
  • Network Protocol Simulators - Mimics common network protocols to capture authentication attempts and file operations from targets.
  • Out-of-Band Security Testing - Detects blind vulnerabilities by triggering and verifying external network callbacks to a remote listener.
  • Multi-Protocol Listeners - Runs concurrent listeners on a single server instance to capture traffic across HTTP, DNS, and SMTP.
  • Response Simulators - Simulates various network protocols and response behaviors to test how applications handle different server responses.
  • Cloud Metadata Routing - Directs DNS requests to cloud metadata services to verify server-side request forgery vulnerabilities.
  • Wildcard DNS Domain Configurations - Configures wildcard DNS to direct all incoming queries for a set of domains to a single tracking server.
  • Dynamic Response Controllers - Determines the HTTP response code and body based on parameters embedded in the request URL.
  • Security Workflow Integrations - Integrates with external proxy interfaces to generate payloads and view interactions within a unified workflow.
  • SSL Certificate Automation - Automatically generates and renews wildcard TLS certificates using the ACME protocol to secure interaction domains.
  • ACME Certificate Clients - Automatically requests and renews wildcard TLS certificates via the ACME protocol.
  • Webhook Event Notifications - Triggers real-time alerts to external services via webhooks whenever a new network interaction is recorded.
  • Instant HTTP Responses - Generates immediate HTTP responses with custom status codes and bodies using URL query parameters.
  • Security Utilities - Detects out-of-band security interactions.
4,380 stars·464 forks·Go·MIT·25 views

Star history

Star history chart for projectdiscovery/interactshStar history chart for projectdiscovery/interactsh

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Frequently asked questions

What does projectdiscovery/interactsh do?

Interactsh is an out-of-band security testing framework and interaction server designed to detect vulnerabilities such as server side request forgery and blind injections. It functions as a multi-protocol interaction collector that captures DNS, HTTP, and SMTP requests to verify outbound communication from remote applications.

What are the main features of projectdiscovery/interactsh?

The main features of projectdiscovery/interactsh are: Out-of-Band Callback Servers, Out-of-Band Interaction Monitoring, Interaction Capture Servers, SSRF Metadata Endpoint Resolvers, Interaction Gateways, Network Protocol Simulators, Out-of-Band Security Testing, Multi-Protocol Listeners.

Which projects share features with projectdiscovery/interactsh?

Projects with overlapping indexed features include: projectdiscovery/naabu — Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to… yaklang/yakit — Yakit is a comprehensive cybersecurity all-in-one platform designed for security assessments. It integrates a suite of… win-acme/win-acme — Automate SSL/TLS certificates on Windows with ease. steveltn/https-portal — This project is a Docker-based Nginx reverse proxy manager designed to automate the deployment of HTTPS for web… axllent/mailpit — Mailpit is an SMTP mail testing server and web-based email inbox designed to intercept and store outgoing emails for… projectdiscovery/subfinder — Subfinder is a security reconnaissance framework designed for subdomain enumeration and attack surface management. It…

Projects sharing features with Interactsh

These projects share indexed features with Interactsh. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • projectdiscovery/naabuprojectdiscovery avatar

    projectdiscovery/naabu

    5,766View on GitHub↗

    Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

    Gocdn-exclusionhacktoberfestnmap
    View on GitHub↗5,766
  • yaklang/yakityaklang avatar

    yaklang/yakit

    7,386View on GitHub↗

    Yakit is a comprehensive cybersecurity all-in-one platform designed for security assessments. It integrates a suite of core tools including an HTTP interception proxy for real-time traffic modification, an out-of-band interaction detector for verifying remote command execution via TCP, DNSLog, and ICMP, and a reverse shell manager for controlling remote server connections. The platform is distinguished by its dedicated security scripting environment, which allows for the development and execution of custom logic and plugins using a specialized high-performance language. It further extends fun

    TypeScriptblueteamburpsuiteexploit
    View on GitHub↗7,386
  • win-acme/win-acmewin-acme avatar

    win-acme/win-acme

    5,713View on GitHub↗

    Automate SSL/TLS certificates on Windows with ease

    C#acmeacme-v2certificates
    View on GitHub↗5,713
  • steveltn/https-portalSteveLTN avatar

    SteveLTN/https-portal

    4,694View on GitHub↗

    This project is a Docker-based Nginx reverse proxy manager designed to automate the deployment of HTTPS for web applications. It functions as a gateway that acquires and renews security certificates via Let's Encrypt and proxies incoming traffic to backend services. The system distinguishes itself by automatically discovering web services running in Docker containers to eliminate manual domain configuration. It manages security certificates through an automated process and can expose these certificates to other applications via shared volumes. The tool covers traffic management through load

    Ruby
    View on GitHub↗4,694
Compare all 30 related projects→