Extracting Data from Slack: Hackers Will, You Should!
From Wild West Hackin' Fest 2018 in Deadwood, SD.
Presenters: Carrie Roberts and Tony Habeger
Is your Slack workspace full of sensitive data? Wouldn't you like to know the details? As an experienced red-teamer, the answer to these two questions are 'yes' and 'oh baby yes'. I will be releasing and demonstrating a PowerShell script that will extract all documents and files that an authorized user has access to. It can also extract all user profiles. As an attacker, I can use the profiles to extract user names, email addresses, phone numbers and job titles to enhance my ability to Phish an organization or password spray login portals. I can also perfrom offline searches for sensitive data of all messages and files. Blue team, what will I find? Run this tool yourself to understand the impact of a breach. Can you detect this tool in use by reviewing the Slack Audit logs? Come to this presentation to find out!
Follow Wild West Hackin' Fest on Twitter here: / wwhackinfest
Website & Info: https://www.wildwesthackinfest.com/