1. Documentation
2. The ZAP by Checkmarx Desktop User Guide
3. Add-ons
4. Out-of-band Application Security Testing Support
5. OAST Services
6. Interactsh

Interactsh

Interactsh is an open-source solution for out-of-band data extraction.

This add-on requires an Interactsh server running version 1.3.0 or later, which encrypts interactions using AES-CTR; earlier servers (AES-CFB) are not supported.

Features

• DNS/HTTP/SMTP Interaction support
• AES encryption with zero logging
• Self hosted server support
• Automatic ACME based Wildcard TLS w/ Auto Renewal

Requests made to Interactsh by the target web application can be viewed in the OAST Callbacks Tab in the ZAP GUI.

See also