projectdiscovery/interactsh

Health v2 · maintenance only

Adoption not part of the score

4512 stars · 478 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Interactsh is an open-source tool for detecting out-of-band (OOB) interactions via DNS, HTTP(S), SMTP(S), and LDAP, useful for identifying vulnerabilities that trigger external callbacks. It ships as a CLI client, web client, and self-hostable server, with a Go client library for integration.

Use cases

• detect blind SSRF vulnerabilities
• detect out-of-band interactions during penetration testing
• self-host an OOB interaction server for bug bounty testing
• detect blind command injection and XXE via DNS callbacks
• integrate OOB detection into security scanning tools
• correlate external callbacks with vulnerability payloads

When to choose

• you need to detect blind/out-of-band vulnerabilities like SSRF, XXE, or blind RCE
• you want a self-hosted alternative to Burp Collaborator with encrypted, zero-logging interactions
• you need a Go client library to embed OOB detection into your own scanners

When to avoid

• your testing scope forbids external network callbacks
• you only need passive vulnerability scanning without interaction correlation

Facets

cli-tool · maturity active

security http-server networking cli sdk security penetration-testing developer-tools networking windows go cli self-hosted browser oob oast dns bugbounty vulnerability-detection burp-suite zap smtp ldap linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="projectdiscovery/interactsh")