[Enhancement] Use this to add/vote for new data sources/scans

[emtunc]

Let's use this ticket to add and vote on new scan types and data sources that can be added to the tool.

Most voted comments are prioritised first.

[emtunc]

Slack tokens - look for Slack tokens that may have been leaked within a Slack Workspace. This could allow an attacker to pivot to a more privileged user or someone whose account can be used to phish other users for example.

[emtunc]

Github tokens - unless there's a unique way to differentiate these from other 40 character strings then this might introduce some false positives. Worth a try though.

[emtunc]

Azure secret keys

[emtunc]

Google Cloud Platform secret keys

[emtunc]

Password and/or tokens in URLs

[ghost]

Pull the content of pinned items in each channel. Often times these are solutions for recurring problems within a team ("what was the GOCD login?", "Where are the Chef credentials?")

[ghost]

API Reference for listing pinned items: https://api.slack.com/methods/pins.list

May also require listing channels (https://api.slack.com/methods/channels.list) as the channel with the pinned items must be specified

[emtunc]

API Reference for listing pinned items: https://api.slack.com/methods/pins.list

May also require listing channels (https://api.slack.com/methods/channels.list) as the channel with the pinned items must be specified

This has been implemented in #https://github.com/emtunc/SlackPirate/commit/4c28dafbc89abf35d04a313ee53970cbf9f0a503