PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Nuclei + Interactsh Integration for Automating OOB Testing

projectdiscovery.io | vulnerability | #bug-bounty | #red-team
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

We released interactsh, a server that can emulate a DNS, HTTP, HTTPS and SMTP server, allowing users to test for Out of Band Security vulnerabilities. Nuclei v2.3.6 now supports using the interact.sh API to achieve OOB based vulnerability scanning with automatic Request correlation built in. It's as easy as writing {{interactsh-url}} anywhere in the request, and adding a matcher for interact_protocol. Nuclei will handle correlation of the interaction to the template & the request it was generat
Published
Collected

Related coverage

tool · projectdiscovery.io
Enhanced Team Management, 2FA, and Asset Filtering - PDCP (v0.8.7)
We are pleased to unveil our latest release of ProjectDiscovey Cloud Platform, v0.8.7, packed with features that streamline team management, enhance security, and improve asset operations—particularly for enterprise security engineers. Read on to learn what's new. Multi-Team Creation & Member Segregation We've introduced the ability to create multiple teams, providing greater flexibility and control over project management. Create multiple teams Segment users and teams, centralize b
tool · projectdiscovery.io
March 2024 Newsletter
The latest release of Nuclei, v3.2, introduces significant updates aimed at enhancing the security scanning capabilities of the Nuclei engine.
tool · projectdiscovery.io
Introducing Chaos Bug bounty recon data API
We’re proud to announce release of our Chaos Bug bounty recon data API today. This API will allow hackers to get instant data on targets of their choice without running any additional tools at just single hit of request. Goals behind the project Reconnaissance is complex, it requires a proper setup and not everyone is equally good at it. People are skilled differently, some are amazing at looking at Web Attack Surfaces, some prefer to dive deep into logic bugs. Being good at recon requires some
vulnerability · projectdiscovery.io
Introducing Neo Triage
On October 26, 2026 we're releasing Neo Triage, an autonomous engine for vulnerability triage. While other tools rank your backlog, Neo clears it.
vulnerability · projectdiscovery.io
Celebrating 2024: Securing your infrastructure with ProjectDiscovery
As 2024 comes to a close, we want to celebrate the milestones we’ve achieved together with our ProjectDiscovery community. Thanks to your trust and collaboration, here’s what we’ve accomplished this year on ProjectDiscovery. Platform growth 2k+ new vulnerability templates Identifying nearly 1k high-profile vulnerabilities affecting 600+ unique products—including Atlassian Confluence, GitLab, MLflow, Grafana, GitHub Enterprise, Ivanti, Fortinet, and Palo Alto Networks 50k+ cloud-based scans
vulnerability · projectdiscovery.io
July 2024 Newsletter
Welcome to the July edition of the ProjectDiscovery Community Newsletter. As summer moves along, so too have the team been hard at work improving and iterating on our tools and templates, alongside our valuable community contributions. Our updates from the last few weeks can be caught up on below, and of course keep looking out for the latest news and developments in vulnerability and cybersecurity technology as we continue to share them with you. We’ll also keep highlighting contributions from
Back