Class OastInteractionClause

Namespace

Kuestenlogik.Bowire.Security

Assembly

Kuestenlogik.Bowire.dll

Inner clause of OastInteraction — which out-of-band callback counts as proof (#35 Phase 2f). An empty clause means "any callback at all", which is already the finding for most blind templates: the target contacting a host it was fed is the vulnerability, regardless of transport.

public sealed class OastInteractionClause

Inheritance

object

OastInteractionClause

Inherited Members

object.GetType()

object.ToString()

object.Equals(object)

object.Equals(object, object)

object.ReferenceEquals(object, object)

object.GetHashCode()

Constructors

OastInteractionClause()

public OastInteractionClause()

Properties

Protocol

Only count callbacks that arrived on this transport (dns, http, smtp, …), case-insensitively. Maps Nuclei's part: interactsh_protocol matcher. Null = any transport.

Worth pinning: a DNS-only callback proves the target *resolved* the host, an HTTP one proves it actually fetched it — a materially stronger claim that some templates require.

[JsonPropertyName("protocol")]
public string? Protocol { get; set; }

Property Value

string

RequestContains

Only count callbacks whose raw request contains this substring (case-insensitive). Maps Nuclei's part: interactsh_request matcher — e.g. asserting exfiltrated content came back in the callback. Null = don't inspect the request.

[JsonPropertyName("requestContains")]
public string? RequestContains { get; set; }

Property Value

string