Add -certificate-check and -certificate-verify flags

cmd/interactsh-client/main.go

@@ -52,6 +52,8 @@ func main() {
 		flagSet.IntVarP(&cliOptions.CorrelationIdNonceLength, "correlation-id-nonce-length", "cidn", settings.CorrelationIdNonceLengthDefault, "length of the correlation id nonce"),
 		flagSet.StringVarP(&cliOptions.SessionFile, "session-file", "sf", "", "store/read from session file"),
 		flagSet.DurationVarP(&cliOptions.KeepAliveInterval, "keep-alive-interval", "kai", time.Minute, "keep alive interval"),
+		flagSet.BoolVarP(&cliOptions.CheckCert, "certificate-check", "cc", false, "check the certificate of the interactsh server"),
+		flagSet.BoolVarP(&cliOptions.VerifyCert, "certificate-verify", "cv", false, "verify the certificate of the interactsh server"),
 	)
 
 	flagSet.CreateGroup("filter", "Filter",
@@ -136,6 +138,8 @@ func main() {
 		DisableHTTPFallback:      cliOptions.DisableHTTPFallback,
 		CorrelationIdLength:      cliOptions.CorrelationIdLength,
 		CorrelationIdNonceLength: cliOptions.CorrelationIdNonceLength,
+		VerifyCert:               cliOptions.VerifyCert,
+		CheckCert:                cliOptions.CheckCert,
 		SessionInfo:              sessionInfo,
 	})
 	if err != nil {

pkg/client/client.go

@@ -88,6 +88,10 @@ type Options struct {
 	SessionInfo *options.SessionInfo
 	// keepAliveInterval to renew the session
 	KeepAliveInterval time.Duration
+	// VerifyCert to skip certificate verification
+	VerifyCert bool
+	// CheckCert to check certificate
+	CheckCert bool
 }
 
 // DefaultOptions is the default options for the interact client
@@ -115,6 +119,22 @@ func New(options *Options) (*Client, error) {
 		opts.Timeout = 10 * time.Second
 		httpclient = retryablehttp.NewClient(opts)
 	}
+	if options.CheckCert {
+		httpclient.HTTPClient.Transport.(*http.Transport).TLSClientConfig.InsecureSkipVerify = false
+	}
+	if options.VerifyCert {
+		httpclient.HTTPClient.Transport.(*http.Transport).TLSClientConfig.InsecureSkipVerify = false
+		interactshServerURL := ""
+		if strings.Contains(options.ServerURL, "://") {
+			interactshServerURL = options.ServerURL
+		} else {
+			interactshServerURL = "https://" + options.ServerURL
+		}
+		_, check := httpclient.HTTPClient.Get(interactshServerURL)
+		if check != nil {
+			return nil, fmt.Errorf("certificate verification failed: %s", check)
+		}
+	}
 
 	var correlationID, secretKey, token string
 

pkg/options/client_options.go

@@ -30,4 +30,6 @@ type CLIClientOptions struct {
 	Asn                      bool
 	DisableUpdateCheck       bool
 	KeepAliveInterval        time.Duration
+	VerifyCert               bool
+	CheckCert                bool
 }