SlackPirate
SlackPirate copied to clipboard
emtunc
Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
When you use the `--cookie` option it sends the `d` cookie to https://slackpirate-donotuse.slack.com It is not clear from the readme that this will happen and what / if anything is...
Unable to get data. this was using a token. Python 3.7.2 ``` [Credentials]: Attempting to find references to credentials Traceback (most recent call last): File "./SlackPirate.py", line 1006, in _interactive_command_line(args,...
I'm getting `[ERROR]: No Workspaces were found with this cookie` no matter what I do. Looking at the source it looks like it's trying to find the `xoxs` token by...
So in the community with 4700 people it grabs only 900. When I change MAX_RETRIEVAL_COUNT = 9000 it grabs only 1000. I believe something is wrong with pagination, so he...
Hi, Slack no longer produce legacy tokens, will it accept the new style app tokens? Also with slack you can now export all messages etc to a file, is it...
I ran the main function to extract credentials as : ```$ ./SlackPirate.py --token xoxs-xxxxxxxx --credential-scan``` the harvested credentials were successfully written to `.//passwords.txt` Meanwhile, in my private experimental slack workspace...
This PR solves issue #46 What does this solve? * Data loss - the regex filtering sometimes does not extract the right word. In this fix, it does not regex...
Unlike `pinned messages`, if the `passwords`, `aws-keys.txt`, `private-keys`, `urls` are not found it is not acknowledged properly. In case of specific harvesting, such as for example only `credential-scan` an empty...
It would be good to be able to specify a proxy to run all requests though.
