New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update Slack Cookies bof to seach for user tokens in addition to cookies, and to have a settable max length for matches #28

Open

MayerDaniel wants to merge 1 commit into trustedsec:main from MayerDaniel:main

MayerDaniel commented Feb 19, 2024

Allows the slack cookies bof to hunt for user api tokens which can be used in conjuction with the user's cookie to query the slack API directly.

For example:

curl https://slack.com/api/users.list  -H "Authorization: Bearer xoxc-47..." -H "Cookie: d=xoxd-Xq45...(URL encoded)"

I also created a max length variable to limit string output for matches in memory that are missing a null terminated string


          hunt for user api tokens in addition to cookies and limit large strin…

ba26fdf

…g output

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment