SlackPirate – Slack Enumeration And Extraction Tool

Slackpirate is a free and open-source tool available on GitHub. Slackpirate is used to identify and detect sensitive information which can be used to perform auditing on the computer system and servers. Slackpirate can also be used to extract useful information such as data, documents, credentials (id and passwords). This information can be extracted from the low privilege accounts of the organizations. Slackpirate is integrated with another power tool which is called chatop’s. Slackpirate uses slack.  Slackpirate uses slack APIs for extracting information from any slack workspace. Slackpirate is very famous among red teamers and security researchers for auditing.  Slackpirate is written in python language you must have python language installed in your kali Linux operating

Purpose of SlackPirate

Basically, there are two purposes of this tool which are given below:-

• Red-teamers use slackpirate to perform reconnaissance and extract information, credentials, documents, etc. slackpirate can give a workspace for an organization. This workspace can allow a hacker or an attacker to attack the systems of the organization.
• Blue-teamers can use slackpirate to identify the sensitive information’s on the workspace of the organization. Blue-teamers can use this sensitive information to perform awareness and internal training of the employees of the organization.

Features of SlackPirate

1. SlackPirate uses its native slack API to extract useful information.
2. SlackPirate has links to S3 buckets.
3. SlackPirate is written in python language.
4. SlackPirate can be used with AWS Access/Secret keys.
5. SlackPirate can be used with private keys with hashing.
6. SlackPirate can be used to print all the messages which are present across all channels.

Installation

Step 1: Use the following command to install the tool from GitHub.

git clone https://github.com/emtunc/SlackPirate

Step 2: Now use the following command to install the requirements of the tool.

pip install -r requirements.txt

Step 3:  All the dependencies of the tool have been installed, Now use the following command to run the tool.

python3 SlackPirate.py --help

The tool has been downloaded and running successfully. Now we will see examples to use the tool.

Usage

Example 1:  Use the SlackPirate tool to provide tokens to the tool.

python3 SlackPirate.py –interactive

This is how you can set tokens using –interactive flag.

Example 2:  Use the SlackPirate tool to find any associated Workspaces that can be accessed using that cookie

python3 SlackPirate.py –cookie