Skip to content

Wildcard server only sends interactions to one connected client, instead of all of them #1296

@denandz

Description

@denandz

Interactsh version:

1.2.4

Current Behavior:

When running an interactsh server with the -wc option, all interactions are logged and sent to a client regardless of the subdomain. If two clients are connected to the interactsh server, only one of them will receive the interaction data.

Expected Behavior:

All clients connected to a server run with -wc wildcard option enabled should see all interactions with that server.

Steps To Reproduce:

1 - run an interactsh server with -wc
2 - connect to the interactsh server with two different clients (eg: two different terminal windows)
3 - trigger an interaction
4 - notice that only one client recieves the interaction data.

The following screenshot shows the example with two clients, and only one receiving the data.

Image

curl --resolve foo.testlab.local:80:<test interactserver ip> http://foo.testlab.local/FINDME was used to trigger the interaction.

Anything else:

Similar to #1135 - this functionality needs to send all interactions to all connected clients to support a team of security testers sharing infrastructure or working on the same target.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions