projectdiscovery/interactsh
Interactsh
Interactsh 是一个带外（out-of-band）安全测试框架和交互服务器，旨在检测服务器端请求伪造（SSRF）和盲注（blind injections）等漏洞。它作为一个多协议交互收集器，捕获 DNS、HTTP 和 SMTP 请求，以验证来自远程应用的对外通信。
该项目提供了一个自托管交互网关，用于管理唯一载荷（payloads）并收集跨多个域的网络交互。它的独特之处在于能够模拟各种网络协议和响应行为，包括将请求路由到云元数据服务以识别特定漏洞。
该系统涵盖了广泛的功能，包括通过 ACME 为通配符域自动管理 SSL 证书、通过 Webhook 和第三方平台进行实时事件通知，以及托管用于注入测试的静态载荷。它还包括用于会话状态持久化和查询驱动响应控制的机制，以管理服务器如何处理传入请求。
Features
- Out-of-Band Callback Servers - Provides a dedicated server to capture asynchronous network callbacks for detecting OOB vulnerabilities like SSRF.
- Out-of-Band Interaction Monitoring - Captures asynchronous network callbacks across multiple protocols to identify blind vulnerabilities.
- Interaction Capture Servers - Provides a self-hosted server for managing unique payloads and capturing interactions across multiple domains.
- SSRF Metadata Endpoint Resolvers - Identifies server-side request forgery by resolving DNS records to cloud metadata IP addresses.
- Interaction Gateways - Ships a self-hosted gateway for managing security payloads and collecting real-time interaction triggers.
- Network Protocol Simulators - Mimics common network protocols to capture authentication attempts and file operations from targets.
- Out-of-Band Security Testing - Detects blind vulnerabilities by triggering and verifying external network callbacks to a remote listener.
- Multi-Protocol Listeners - Runs concurrent listeners on a single server instance to capture traffic across HTTP, DNS, and SMTP.
- Response Simulators - Simulates various network protocols and response behaviors to test how applications handle different server responses.
- Cloud Metadata Routing - Directs DNS requests to cloud metadata services to verify server-side request forgery vulnerabilities.
- Wildcard DNS Domain Configurations - Configures wildcard DNS to direct all incoming queries for a set of domains to a single tracking server.
- Dynamic Response Controllers - Determines the HTTP response code and body based on parameters embedded in the request URL.
- Security Workflow Integrations - Integrates with external proxy interfaces to generate payloads and view interactions within a unified workflow.
- SSL Certificate Automation - Automatically generates and renews wildcard TLS certificates using the ACME protocol to secure interaction domains.
- ACME Certificate Clients - Automatically requests and renews wildcard TLS certificates via the ACME protocol.
- Webhook Event Notifications - Triggers real-time alerts to external services via webhooks whenever a new network interaction is recorded.
- Instant HTTP Responses - Generates immediate HTTP responses with custom status codes and bodies using URL query parameters.
- Security Utilities - Detects out-of-band security interactions.
