-
Notifications
You must be signed in to change notification settings - Fork 435
Description
Interactsh version:
1.2.4
Current Behavior:
When running an interactsh server with the -wc option, all interactions are logged and sent to a client regardless of the subdomain. If two clients are connected to the interactsh server, only one of them will receive the interaction data.
Expected Behavior:
All clients connected to a server run with -wc wildcard option enabled should see all interactions with that server.
Steps To Reproduce:
1 - run an interactsh server with -wc
2 - connect to the interactsh server with two different clients (eg: two different terminal windows)
3 - trigger an interaction
4 - notice that only one client recieves the interaction data.
The following screenshot shows the example with two clients, and only one receiving the data.
curl --resolve foo.testlab.local:80:<test interactserver ip> http://foo.testlab.local/FINDME was used to trigger the interaction.
Anything else:
Similar to #1135 - this functionality needs to send all interactions to all connected clients to support a team of security testers sharing infrastructure or working on the same target.