Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding exfiltrate data option #852

Open
wants to merge 3 commits into
base: dev
Choose a base branch
from
Open

Conversation

vrechson
Copy link

Hello, I created the -ed option to exfiltrate data. When enabled, it will analyze every DNS request and look for the following pattern: content.filename.extension.interactshdomain.tld. When the pattern matches, it will append every content sent to filename.extension, which means that changing this subdomains you may exfiltrate different files. I also added an example in the readme and the -silent option that will only hide the banner.

@GeorginaReeder
Copy link

Thanks so much for your contribution @vrechson , we appreciate it!

We also have a Discord server, which you’re more than welcome to join. It's a great place to connect with fellow contributors and stay updated with the latest developments!

@Mzack9999
Copy link
Member

@vrechson Thanks for this PR. Could you describe a bit more the use case of this functionality? Are you using interactsh within a pipeline or as SDK? In the second case maybe a callback system would be more functional, allowing to customize the behavior dynamically?

@vrechson
Copy link
Author

vrechson commented May 8, 2024

@vrechson Thanks for this PR. Could you describe a bit more the use case of this functionality? Are you using interactsh within a pipeline or as SDK? In the second case maybe a callback system would be more functional, allowing to customize the behavior dynamically?

Example: You are in a pentest and are asked to demonstrate the impact of a RCE in an enviroment where there is only DNS outbound. With this option you can exfiltrate a file such as /etc/passwd encoded in hex or base64 using multiple DNS interactions and it will concatenate the content back into a file.

@ehsandeep ehsandeep changed the base branch from main to dev May 19, 2024 17:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants