interactsh-cli is a NODE client of GO based tool Interactsh.
Interactsh Client
Usage
interactsh-cli -h
This will display help for the tool. Here are all the switches it supports.
Usage:
./interactsh-cli [flags]
Flags:
INPUT:
-s, --server string interactsh server(s) to use (default "oast.pro,oast.live,oast.site,oast.online,oast.fun,oast.me")
CONFIG:
--config string flag configuration file (default "$HOME/.config/interactsh-cli/config.yaml")
-n, --number int number of interactsh payload to generate (default 1)
-t, --token string authentication token to connect protected interactsh server
--poll-interval int poll interval in seconds to pull interaction data (default 5)
FILTER:
--dns-only display only dns interaction in CLI output
--http-only display only http interaction in CLI output
--smtp-only display only smtp interactions in CLI output
OUTPUT:
-o string output file to write interaction data
-json write output in JSONL(ines) format
-v display verbose interaction
Interactsh Client
Install using NPM
npm install @projectdiscovery/interactsh-cli
Install using yarn
yarn add @projectdiscovery/interactsh-cli
Default Run
This will generate a unique payload that can be used for OOB testing with minimal interaction information in the output.
interactsh-cli ┌─────────────────────────────────────────────────────────────────────────┐ │ │ │ ___ _ _ _____ _____ ____ _ ____ _____ ____ _ _ │ │ |_ _|| \ | ||_ _|| ____|| _ \ / \ / ___||_ _|/ ___| | | | | │ │ | | | \| | | | | _| | |_) | / _ \ | | | | \___ \ | |_| | │ │ | | | |\ | | | | |___ | _ < / ___ \| |___ | | ___) || _ | │ │ |___||_| \_| |_| |_____||_| \_\/_/ \_\\____| |_| |____/ |_| |_| │ │ │ │ projectdiscovery.io │ │ │ └─────────────────────────────────────────────────────────────────────────┘ ✓ Registered successfully. [INF] Listing 1 payload for OOB Testing [INF] 1.(caqdjfsp25ca04rrcybggfms38hyyyyyb.oast.pro) [caqdjfsp25ca04rrcybggfms38hyyyyyb] Received DNS interaction (AAAA) from 172.247.34.69 at 2022-06-19_13:37 [caqdjfsp25ca04rrcybggfms38hyyyyyb] Received DNS interaction (undefined) from 172.247.34.69 at 2022-06-19_13:37 [caqdjfsp25ca04rrcybggfms38hyyyyyb] Received DNS interaction (A) from 172.247.34.69 at 2022-06-19_13:37 [caqdjfsp25ca04rrcybggfms38hyyyyyb] Received DNS interaction (A) from 172.247.34.69 at 2022-06-19_13:37 [caqdjfsp25ca04rrcybggfms38hyyyyyb] Received DNS interaction (AAAA) from 172.247.34.69 at 2022-06-19_13:37 [caqdjfsp25ca04rrcybggfms38hyyyyyb] Received DNS interaction (undefined) from 172.247.34.69 at 2022-06-19_13:37
Using Self-Hosted server
Using the server
flag, interactsh-cli
can be configured to connect with a self-hosted Interactsh server, this flag accepts single or multiple server separated by comma.
interactsh-cli --server hackwithautomation.com
We maintain a list of default Interactsh servers to use with interactsh-cli
:
- oast.pro
- oast.live
- oast.site
- oast.online
- oast.fun
- oast.me
Default servers are subject to change/rotate/down at any time, thus we recommend using a self-hosted interactsh server if you are experiencing issues with the default server.
Using Protected Self-Hosted server
Using the token
flag, interactsh-cli
can connect to a self-hosted Interactsh server that is protected with authentication.
interactsh-cli --server hackwithautomation.com --token XXX
Interactsh Web Client
Interactsh-web is a free and open-source web client that displays Interactsh interactions in a well-managed dashboard in your browser. It uses the browser's local storage to store and display all incoming interactions. By default, the web client is configured to use interact.sh as default interactsh server, and supports other self-hosted public/authencaited interactsh servers as well.
A hosted instance of interactsh-web client is available at https://app.interactsh.com