Interactsh is an out-of-band interaction detection tool that gathers and monitors external interactions triggered by potential vulnerabilities.
The tool addresses the challenge of detecting vulnerabilities that cause applications to make unexpected external connections. It works by providing unique payload identifiers that testers inject into target applications, then monitors for DNS, HTTP, SMTP, LDAP, and other protocol-level callbacks. When a vulnerable application processes the payload, it generates an interaction that the tool captures and logs, revealing the vulnerability without requiring direct response observation from the target application itself.
Interactsh suits security researchers, penetration testers, and bug bounty hunters who need to identify blind vulnerabilities like server-side request forgery, command injection, or XML external entity processing. The tool offers both a managed cloud service accessible via CLI and web interface, and a self-hosted server option for teams requiring full control and privacy. Self-hosted deployments add capabilities including NTLM and SMB listeners, protected interactions, custom SSL certificates, and support for multiple domains. The project integrates with Burp Suite and OWASP ZAP for workflow integration.
The project maintains steady development activity with regular updates addressing both client and server functionality. The codebase shows consistent refinement of core features like encryption and interaction detection mechanisms. The tool receives ongoing maintenance for compatibility with current Go versions and security practices. Community contributions are actively welcomed through the project's issue tracking and collaboration channels.
