Analyze HTTP, DNS and SMTP requests and create custom responses and DNS records for your subdomain
-
Updated
Sep 23, 2026 - Rust
#
interactsh
Here are 13 public repositories matching this topic...
SQLMap wrapper that lets you use Interact.sh as a DNS server for exfiltrating data with zero configuration
golang detection pentesting exploitation sqlmap data-exfiltration dns-exfiltration oob pentesting-tool oast interactsh
-
Updated
Jan 15, 2026 - Go
Interactsh deployment to AWS EC2 Instance with Terraform
-
Updated
Dec 29, 2021 - HCL
A simple application that shows how to exploit the CVE-2022-42889 vulnerability
-
Updated
Nov 6, 2022 - Java
🆓 Free Burp Collaborator Alternative - Advanced Out-of-Band testing for Burp Suite Community & Pro. Multi-bin management, RequestBin.net integration, persistent storage.
penetration-testing bug-bounty requestbin vulnerability-assessment security-tools security-testing burp-suite oob-testing interactsh burp-collaborator free-alternative burp-extension out-of-band-testing ssrf-testing burp-community
-
Updated
Mar 28, 2026 - Java
A traffic-driven web DAST scanner: browse through its proxy and it tests the requests it sees - passive analysis, replayed mutation and nuclei-compatible templates, out-of-band callbacks, HTML / JSON / SARIF reports. | 流量驱动的 Web DAST 扫描器：浏览器走它的代理即可被检测 —— 被动分析、变异重放与 nuclei 兼容模板，带外回调，报告支持 HTML / JSON / SARIF。
golang xss sqli web-security ctf burp pentest sqlmap offensive-security red-team ssrf sarif security-tools vulnerability-scanner dast nuclei-templates interactsh
-
Updated
Oct 19, 2026 - Go
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
security penetration-testing application-security pentesting appsec security-tools security-testing out-of-band oob pentesting-tools oast interactsh
-
Updated
Oct 18, 2026 - Go
Minimal out-of-band (OOB) interaction server PoC — DNS + HTTP catch-all + live dashboard, from scratch in Rust. Authorized pentest use only.
-
Updated
Jun 12, 2026 - Rust
Burp Suite extension for out-of-band (OOB) SSRF testing — injects unique canary payloads into HTTP headers and URL/body/JSON parameters against your own callback endpoint (Interactsh, webhook.site, ngrok, custom). Works with Burp Community.
python bug-bounty web-security pentesting jython ssrf burpsuite security-tools out-of-band oob burp-suite interactsh burp-extension ssrf-detection
-
Updated
Sep 6, 2026 - Python
Web exploitation toolkit for CTF and authorized penetration testing. One adaptive state machine across several vulnerability classes: SSRF, PHP/Java protocol wrappers, command injection, deserialization.
python security deserialization penetration-testing pentesting ctf gopher exploitation offensive-security red-team ssrf command-injection interactsh php-wrappers
-
Updated
Oct 17, 2026 - Python
KarmaEcho is a high-performance OOB (Out-of-Band) interaction gathering server for security testing. Built with Go, it supports DNS, HTTP(S), SMTP, LDAP, WebSocket, FTP, and SMB protocols with AES encryption and zero logging.
dns golang security websocket penetration-testing bug-bounty vulnerability-detection security-tools oob-testing interactsh
-
Updated
Mar 5, 2026 - Go
Blind XSS detection built on interact.sh — per-field tokenized payloads, injection-point↔vulnerable-URL correlation, screenshot/DOM capture, and a persistent-session reverse proxy. Authorized testing only.
security xss reverse-proxy bug-bounty web-security pentesting appsec xss-detection security-tools blind-xss oast interactsh
-
Updated
Aug 9, 2026 - Python
interactsh as an MCP server in Go — stdio / Streamable HTTP / SSE transports, token auth, proxy support
-
Updated
Oct 16, 2026 - Go
Add this topic to your repo
To associate your repository with the interactsh topic, visit your repo's landing page and select "manage topics."