DNS interactions for HTTPS, ANY, CAA, SRV and other query types are stored with an empty q-type

Closed
  • Is something wrong?
#1,503 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

A pull request for this has already been merged.

  • #1504 by @antcybersec — merged
  • #1511 by @TassioSales — merged

Assessment

Difficulty
1/5
Estimated time
1-3 hours
Newbie friendliness
35/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
go
Domain
networking

Research direction

Read toQType in pkg/server/dns_server.go and check the existing DNS interaction tests. Run the relevant package tests, then verify that supported query types display their mnemonic and unknown types display as TYPE<n>; the reporter says a PR is already ready, so this work may already be underway.

Written by the indexing model from the issue text.

Description

Interactsh version:

dev @ a7c1b71. v1.4.1 behaves the same.

Current Behavior:

toQType in pkg/server/dns_server.go names only 8 query types: A, NS, CNAME, SOA, PTR, MX, TXT and AAAA. For every other type, the stored interaction has an empty q-type. interactsh-client then prints (), and its -json output leaves the field out entirely. Apple platforms and modern browsers routinely send HTTPS (type 65) queries alongside A/AAAA, so these interactions are common.

$ interactsh-client -s <server>
# then, from another shell:
$ for t in A AAAA TYPE65 ANY CAA SRV; do dig <payload> $t @<server>; done

[dbiednbo9u9kof73sgn04x7tae9q4xb4s] Received DNS interaction (A) from 127.0.0.1 at 2026-10-31 00:20:08
[dbiednbo9u9kof73sgn04x7tae9q4xb4s] Received DNS interaction (AAAA) from 127.0.0.1 at 2026-10-31 00:20:08
[dbiednbo9u9kof73sgn04x7tae9q4xb4s] Received DNS interaction () from 127.0.0.1 at 2026-10-31 00:20:08
[dbiednbo9u9kof73sgn04x7tae9q4xb4s] Received DNS interaction () from 127.0.0.1 at 2026-10-31 00:20:08
[dbiednbo9u9kof73sgn04x7tae9q4xb4s] Received DNS interaction () from 127.0.0.1 at 2026-10-31 00:20:08
[dbiednbo9u9kof73sgn04x7tae9q4xb4s] Received DNS interaction () from 127.0.0.1 at 2026-10-31 00:20:08
Expected Behavior:

(HTTPS), (ANY), (CAA), (SRV). Types without a mnemonic should appear as TYPE<n>.

Steps To Reproduce:
  1. Run interactsh-server and interactsh-client -s <server>.
  2. Run dig <payload> TYPE65 @<server> (or ANY, CAA, SRV).
  3. The client prints Received DNS interaction ().
Anything else:

miekg/dns already provides this mapping as dns.Type(qtype).String(). It covers every known type and falls back to TYPE<n>. I have a PR ready.

Dominant language
Go
Stars
4.6k
Forks
490
Avg merge
1d 20h
Merged PRs (30d)
31

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from projectdiscovery/interactsh

All issues in projectdiscovery/interactsh

Similar issues

More Go issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.