Understanding OOB testing with Nuclei Templates
{{interactsh-url}}
anywhere in the request, and adding a matcher for interact_protocol
. Nuclei will handle correlation of the interaction to the template & the request it was generated from allowing effortless OOB scanning.
{{interactsh-url}}
placeholder is supported in http and network requests.
An example of nuclei request with {{interactsh-url}}
placeholders is provided below. These are replaced on runtime with unique interactsh URLs.
word
, regex
or dsl
matcher/extractor using following parts.
part |
---|
interactsh_protocol |
interactsh_request |
interactsh_response |