this post was submitted on 27 Nov 2023
1 points (100.0% liked)

Technical Information Security Content & Discussion

10 readers
1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 2 years ago
MODERATORS
 
This is an automated archive.

The original was posted on /r/netsec by /u/Dr_Mantis_Tobbogon on 2023-11-27 14:07:49+00:00.


I created this Slack attack framework for red teams and pentesters conducting Phishing simulations within Slack workspaces. EvilSlackbot utilizes xoxb bot tokens and allows you to send Spoofed bot messages, phishing links, files, and search Slack for leaked secrets via a keyword search.

This tool can also be used to automate slack phishing exercises, by feeding EvilSlackbot a list of emails you would like to test by sending them simulated phishing messages.

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here