SlackPirate icon indicating copy to clipboard operation
SlackPirate copied to clipboard

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

Results 13 SlackPirate issues
Sort by recently updated
recently updated
newest added

Let's use this ticket to add and vote on new scan types and data sources that can be added to the tool. Most voted comments are prioritised first.

enhancement

Python 3.10.5 python3 SlackPirate.py --token xxxxxx ``` [INFO]: Token looks valid! URL https://xxxxx.slack.com File "/Users/rwiggins/tools/SlackPirate/SlackPirate.py", line 1036, in if check_if_admin_token(token=provided_token, scan_context=collected_scan_context): File "/Users/rwiggins/tools/SlackPirate/SlackPirate.py", line 238, in check_if_admin_token return r['user']['is_admin'] or...

It appears that slack has changed the way authentication is performed. If you login to slack via a browser (i.e. chrome) you can not use the **xoxc** token by itself...