-
I'm trying to understand how to resume a session both when a client has been stopped and when the server has been stopped. I'm not clear if this is possible. My goal is to persist the payload URLs in the case I have to rebuild the infrastructure. Is this supposed to be possible or am I misunderstanding the docs? For the client, I'm using #!/bin/bash
NR_PAYLOADS=5
CIDL_SIZE=4
CIDN_SIZE=4
read -p "Enter server domain: " ISERVER
read -p "Enter auth token: " ISERVER_TOKEN
sudo docker run --rm --name interactsh-client \
-v $PWD/ic:/client-storage \
-v $PWD/ic/config:/root/.config/interactsh-client \
projectdiscovery/interactsh-client \
-s $ISERVER \
-token $ISERVER_TOKEN \
-n $NR_PAYLOADS \
-cidl $CIDL_SIZE \
-cidn $CIDN_SIZE \
-v \
-json \
-o /client-storage/$ISERVER-interactions.txt \
-sf /client-storage/$ISERVER-sessions.txt \
-ps \
-psf /client-storage/$ISERVER-payloads.txt I run the server using this script: #!/bin/bash
IDOMAIN="<mytargetdomain.tld>"
EXTERNAL_IP=$(curl -s -q ipinfo.io/ip)
LISTEN_IP="0.0.0.0"
CIDL_SIZE=4
CIDN_SIZE=4
echo "Starting up InteractSH Server using external IP $EXTERNAL_IP and domain name $IDOMAIN"
read -p "Enter existing sessions token (if available): " $TOKEN
if [ ! -z "$TOKEN" ]
then
TOKEN_AUTH="-t $TOKEN"
fi
docker run --rm --name interactsh-server \
--network host \
-v $PWD/certs/$IDOMAIN:/root/.local/share/certmagic/ \
-v $PWD/is:/server-storage \
-v $PWD/is/config:/root/.config/interactsh-server/ \
projectdiscovery/interactsh-server \
-domain $IDOMAIN \
-auth $TOKEN_AUTH \
-disk -disk-path /server-storage \
-scan-everywhere \
-cidl $CIDL_SIZE \
-cidn $CIDN_SIZE \
-ip $EXTERNAL_IP \
-listen-ip $LISTEN_IP \
-http-index /server-storage/index.html \
-http-directory /server-storage/payloads |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
@flyingdan, it's only possible to resume the client session, not the server. All interaction data is flushed upon any kind of server restart. |
Beta Was this translation helpful? Give feedback.
not necessarily, but it doesn't matter, any paylaod URLs generated before or after resuming session will get the interaction as they were generated under same session.