Learn about self-hosting an interactsh server
https://dcc.godaddy.com/manage/{{domain}}/dns/hosts
ns1
, ns2
with your SERVER_IP
as valuehttps://dns.godaddy.com/{{domain}}/nameservers
ns1.INTERACTSH_DOMAIN
, ns2.INTERACTSH_DOMAIN
interactsh-server
on your VPS
interactsh-server
interactsh-server
with default settings. For example, ip
and listen-ip
flags set with the Public IP address of the system when possible.
interactsh-server
that are not enabled by default and are intended to be used only by self-hosted servers.
interactsh-server
might require custom ports for services if the default ones are already busy. If this is the case but still default ports are required as part of the payload, itβs possible to configure interactsh-server
behind a reverse proxy, by port-forwarding HTTP/TCP/UDP based services via http/stream
proxy directive (proxy_pass
).
interactsh-server
essential services run on the following ports:
-http-index
flag.
{DOMAIN}
placeholder is also supported in index file to replace with server domain name.
-http-directory
flag can be used which accepts diretory as input and files are served under /s/
directory.
-dr
or -dynamic-resp
flag.
The following query parameter names are supported - body
, header
, status
and delay
. Multiple header
parameters can be specified to set multiple headers.
Note:
wildcard
interaction for configured Interactsh domain wildcard
flag can be used with implicit authentication protection via the auth
flag if the token
flag is omitted.
cidl
and cidn
flags to make shorter when required with self-hosted interacsh server.
cert
and privkey
flag can be used to provider required certificate files.
Note: To utilize all of the functionality of the SSL protocol, a wildcard certificate is mandatory.
ldap
flag can be used for complete logging.
-ftp
flag and is recommended for self-hosted instances only. The FTP agent simulates a fully-functional FTP server agent with authentication that captures authentications with every file operation. By default, the agent listens on port 21 (this can be changed with the -ftp-port
flag) and lists in read-only mode the content of the OS default temporary directory (customizable with the -ftp-dir
option).
Example of starting the FTP daemon and capturing a login interaction:
-smb
flag enables the Samba protocol (only for self-hosted instances). The samba protocol uses impacket smbserver
class to simulate a samba daemon share listening on port 445
unless changed by the -smb-port
flag. When enabled, interactsh executes under the hoods the script smb_server.py
. Hence Python3 and impacket dependencies are required.
Example of enabling the samba server:
Responder-Session.log
in the temp folder. To use it on a self-hosted instance, itβs necessary first to build the docker container and tag it as interactsh
(docker daemon must be configured correctly and with port forwarding capabilities):