SlackPirate
SlackPirate copied to clipboard
Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
Let's use this ticket to add and vote on new scan types and data sources that can be added to the tool. Most voted comments are prioritised first.
Python 3.10.5 python3 SlackPirate.py --token xxxxxx ``` [INFO]: Token looks valid! URL https://xxxxx.slack.com File "/Users/rwiggins/tools/SlackPirate/SlackPirate.py", line 1036, in if check_if_admin_token(token=provided_token, scan_context=collected_scan_context): File "/Users/rwiggins/tools/SlackPirate/SlackPirate.py", line 238, in check_if_admin_token return r['user']['is_admin'] or...
It appears that slack has changed the way authentication is performed. If you login to slack via a browser (i.e. chrome) you can not use the **xoxc** token by itself...