interactsh 0.9

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 37bf4d4f80b1a9de3369a25fbdd49dd65d906ff904f30aa7ef47a8c34776704c
+  data.tar.gz: d2b126ee317874046701adccd5e1707d5052665ac7587d3aa97d83bc28d21a21
+SHA512:
+  metadata.gz: 0d19f10e2cb075156372f0198b80ce53ef61bf1ba6c4b67957dc2d85da2d4452800d4070227640ae17d88b3048cb18f2d954687f459524f3f633d0a5c4e9865f
+  data.tar.gz: 44a7331deb7897b52d3ee801d8e11b1542c00e718649c124478f7f46a0f9f33a073adacfe29e1d35d587f337a64e772c21dd2261ca5aabfbfc363c99efe6596c

data/lib/interactsh.rb

@@ -0,0 +1,96 @@
+require 'openssl'
+require 'jose'
+require 'securerandom'
+require 'base64'
+require 'json'
+require 'ruby_xid'
+require 'typhoeus'
+
+class Interactsh
+	attr_reader :public_key_encoded, :secret, :correlation_id, :server, :random_data, :rsa, :token
+
+	def initialize(server = 'interact.sh', token = nil)
+		@rsa = OpenSSL::PKey::RSA.new(2048)
+		@public_key = @rsa.public_key.to_pem
+		@public_key_encoded = Base64.encode64(@public_key)
+
+		@secret = SecureRandom.uuid
+		@correlation_id = Xid.new.to_s
+		@random_data = Array.new(13) { (Array('a'..'z') + Array(0..9)).sample }.join
+
+		@server = server
+		@token = token
+
+		register
+	end
+
+	def get_domain
+		"#{correlation_id}#{random_data}.#{server}"
+	end
+
+	def poll
+		headers = { }
+		headers['Authorization'] = token if token
+
+		request = Typhoeus::Request.new(
+			File.join(server, "/poll?id=#{correlation_id}&secret=#{secret}"),
+			headers: headers
+		)
+		request.run
+
+		decoded_datas = []
+
+		if request.response.code == 200
+			datas = JSON.parse(request.response.body)
+			unless datas.empty?
+				datas["data"].each do |enc_data|
+					decoded_datas << decrypt_data(datas["aes_key"], enc_data)
+				end
+			end
+		else
+			puts "[!] Interactsh - Problem with data recovery"
+			return
+		end
+
+		decoded_datas
+	end
+
+	private
+
+	def register
+		data = {
+			"public-key": public_key_encoded,
+			"secret-key": secret,
+			"correlation-id": correlation_id
+		}.to_json
+
+		headers = { 'Content-Type' => 'application/json' }
+		headers['Authorization'] = token if token
+
+		request = Typhoeus::Request.new(
+			File.join(server, '/register'),
+			method: :post,
+			body: data,
+			headers: headers
+		)
+		request.run
+
+		unless request.response.code == 200
+			puts "[!] Interactsh - Problem with domain registration"
+		end
+	end
+
+	def decrypt_data(aes_key, enc_data)
+		pkey = OpenSSL::PKey::RSA.new(rsa)
+		encrypted_aes_key = Base64.urlsafe_decode64(aes_key)
+		decrypted_aes_key = JOSE::JWA::PKCS1::rsaes_oaep_decrypt(OpenSSL::Digest::SHA256, encrypted_aes_key, pkey)
+
+		secretdata = Base64::decode64(enc_data)
+		decipher = OpenSSL::Cipher::Cipher.new('aes-256-cfb')
+		decipher.decrypt
+		decipher.key = decrypted_aes_key
+
+		# The data minus the size of the IV
+		JSON.parse((decipher.update(secretdata) + decipher.final)[16..])
+	end
+end

metadata

@@ -0,0 +1,84 @@
+--- !ruby/object:Gem::Specification
+name: interactsh
+version: !ruby/object:Gem::Version
+  version: '0.9'
+platform: ruby
+authors:
+- Joshua MARTINELLE
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2022-09-13 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: ruby_xid
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.7
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.0.7
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.7
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.0.7
+- !ruby/object:Gem::Dependency
+  name: typhoeus
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.4'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.4.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.4'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.4.0
+description:
+email:
+- contact@jomar.fr
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/interactsh.rb
+homepage: https://rubygems.org/gems/interactsh
+licenses:
+- MIT
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.7.1
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.2
+signing_key:
+specification_version: 4
+summary: Interactsh Ruby Library
+test_files: []