interactsh 0.9.2 → 0.9.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/interactsh.rb +79 -83
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 6feebc6e3116675ca85a30c2f576d8a7f6eabd9d6becdf255eb36b9a9fe8bf60
|
4
|
+
data.tar.gz: ba28a91c6fce3329f2995be8cfc46ac17c42aaa8485457891cb07d630c9ac22c
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: caa7e51f65571b0357aa8a6e231fd546809782a0134cbcc5d05172881dd704052e616267ed8b2298b05418929b3c60d3ea8c33fb67e13bb0624072b32d38581c
|
7
|
+
data.tar.gz: 96215db908a3feefe6b9fd9f6de54d853f88fa977bceec2a7090821c3052c29fd0370d5d77176c3f406628aa58da4587ccbf4296487f8b82b6ec581247b1cadb
|
data/lib/interactsh.rb
CHANGED
@@ -1,3 +1,5 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
1
3
|
require 'openssl'
|
2
4
|
require 'stringio'
|
3
5
|
require 'jose'
|
@@ -7,87 +9,81 @@ require 'json'
|
|
7
9
|
require 'ruby_xid'
|
8
10
|
require 'typhoeus'
|
9
11
|
|
12
|
+
# InteractSH Ruby Library
|
10
13
|
class Interactsh
|
11
|
-
|
12
|
-
|
13
|
-
|
14
|
-
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
30
|
-
|
31
|
-
|
32
|
-
|
33
|
-
|
34
|
-
|
35
|
-
|
36
|
-
|
37
|
-
|
38
|
-
|
39
|
-
|
40
|
-
|
41
|
-
|
42
|
-
|
43
|
-
|
44
|
-
|
45
|
-
|
46
|
-
|
47
|
-
|
48
|
-
|
49
|
-
|
50
|
-
|
51
|
-
|
52
|
-
|
53
|
-
|
54
|
-
|
55
|
-
|
56
|
-
|
57
|
-
|
58
|
-
|
59
|
-
|
60
|
-
|
61
|
-
|
62
|
-
|
63
|
-
|
64
|
-
|
65
|
-
|
66
|
-
|
67
|
-
|
68
|
-
|
69
|
-
|
70
|
-
|
71
|
-
|
72
|
-
|
73
|
-
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
|
78
|
-
|
79
|
-
|
80
|
-
|
81
|
-
|
82
|
-
|
83
|
-
|
84
|
-
|
85
|
-
|
86
|
-
|
87
|
-
decipher.decrypt
|
88
|
-
decipher.key = decrypted_aes_key
|
89
|
-
|
90
|
-
# The data minus the size of the IV
|
91
|
-
JSON.parse((decipher.update(secretdata) + decipher.final)[16..])
|
92
|
-
end
|
93
|
-
end
|
14
|
+
attr_reader :public_key_encoded, :secret, :server, :random_data, :rsa, :token
|
15
|
+
|
16
|
+
def initialize(server = 'interact.sh', token = nil)
|
17
|
+
@rsa = OpenSSL::PKey::RSA.new(2048)
|
18
|
+
@public_key = @rsa.public_key.to_pem
|
19
|
+
@public_key_encoded = Base64.encode64(@public_key)
|
20
|
+
|
21
|
+
@secret = SecureRandom.uuid
|
22
|
+
@random_data = Array.new(13) { (Array('a'..'z') + Array(0..9)).sample }.join
|
23
|
+
|
24
|
+
@server = server
|
25
|
+
@token = token
|
26
|
+
end
|
27
|
+
|
28
|
+
def new_domain
|
29
|
+
correlation_id = Xid.new.to_s
|
30
|
+
register(correlation_id)
|
31
|
+
|
32
|
+
"#{correlation_id}#{random_data}.#{server}"
|
33
|
+
end
|
34
|
+
|
35
|
+
def poll(host)
|
36
|
+
correlation_id = host[0..19]
|
37
|
+
headers = {}
|
38
|
+
headers['Authorization'] = token if token
|
39
|
+
|
40
|
+
response = Typhoeus.get(File.join(server, "/poll?id=#{correlation_id}&secret=#{secret}"), headers: headers)
|
41
|
+
unless response&.code == 200
|
42
|
+
puts '[!] Interactsh - Problem with data recovery'
|
43
|
+
return
|
44
|
+
end
|
45
|
+
|
46
|
+
datas = JSON.parse(response.body)
|
47
|
+
parse_poll_datas(datas)
|
48
|
+
end
|
49
|
+
|
50
|
+
private
|
51
|
+
|
52
|
+
def parse_poll_datas(datas)
|
53
|
+
decoded_datas = []
|
54
|
+
|
55
|
+
unless datas.empty?
|
56
|
+
datas['data'].each do |enc_data|
|
57
|
+
decoded_datas << decrypt_data(datas['aes_key'], enc_data)
|
58
|
+
end
|
59
|
+
end
|
60
|
+
|
61
|
+
decoded_datas
|
62
|
+
end
|
63
|
+
|
64
|
+
def register(correlation_id)
|
65
|
+
data = { "public-key": public_key_encoded, "secret-key": secret, "correlation-id": correlation_id }.to_json
|
66
|
+
|
67
|
+
headers = { 'Content-Type' => 'application/json' }
|
68
|
+
headers['Authorization'] = token if token
|
69
|
+
|
70
|
+
response = Typhoeus.post(File.join(server, '/register'), body: data, headers: headers)
|
71
|
+
return if response.code == 200
|
72
|
+
|
73
|
+
puts '[!] Interactsh - Problem with domain registration'
|
74
|
+
end
|
75
|
+
|
76
|
+
def decrypt_data(aes_key, enc_data)
|
77
|
+
pkey = OpenSSL::PKey::RSA.new(rsa)
|
78
|
+
encrypted_aes_key = Base64.urlsafe_decode64(aes_key)
|
79
|
+
decrypted_aes_key = JOSE::JWA::PKCS1.rsaes_oaep_decrypt(OpenSSL::Digest::SHA256, encrypted_aes_key, pkey)
|
80
|
+
|
81
|
+
secretdata = Base64.decode64(enc_data)
|
82
|
+
decipher = OpenSSL::Cipher.new('aes-256-cfb')
|
83
|
+
decipher.decrypt
|
84
|
+
decipher.key = decrypted_aes_key
|
85
|
+
|
86
|
+
# The data minus the size of the IV
|
87
|
+
JSON.parse((decipher.update(secretdata) + decipher.final)[16..])
|
88
|
+
end
|
89
|
+
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: interactsh
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.9.
|
4
|
+
version: 0.9.3
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Joshua MARTINELLE
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-
|
11
|
+
date: 2022-11-12 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: jose
|