959 matches found
Salt Open Linux Vulnerability Scanner: Salt Scanner
Salt Open Linux Vulnerability Scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications. Requirements Salt Open salt-master, salt-minion¹ Python 2.7 Salt pip install salt==2016.11.5 Slackclient pip install slackclient==1.0.5 Usage root@localhost pyth...
Slack: Many Slack teams can be joined by abusing an improperly configured support@ inbox
@securinti informed us of support portals configured in manners which allowed for abuse. This is not an issue with Slack itself, but we were able to make a change to help mitigate this for such insecure configurations. Thank you!...
Slack: Uninstalling Slack for Windows (64-bit), then reinstalling keeps you logged in without authentication
I understand that you are unlikely to consider bugs that require physical machine access, however this issue affected me directly and I was very surprised by it, so I felt it was important to report it in case it was not known. Steps to reproduce: 1 Install the desktop Slack app for Windows 64-bi...
Gratipay: Unauthorized access to the slack channel via inside.gratipay.com/appendices/chat
Summary It is possible to force send invites for gratipay slack channel to arbitary email ids with no bruteforce limit. This is done by modifying the coc parameter to 1 in the POST data sent from https://inside.gratipay.com/appendices/chat Description Sending a post request with coc parameter set...
Securitybot - Distributed alerting for the masses!
Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster and more...
Harvest: Login bypass on travel.██████████ aka "Harvest Spring Summit 2017"
Introduction I stumbled upon http://travel.████. It looks like the portal for Harvest Spring Summit 2017 travel planning and announcement. I was able to gain access to this portal and view the travel itineraries of some of the summit's participants. A note on scope I realize this domain is not...
Monitor USB Devices: USB Canary
Monitor USB Devices for potential security breach USB Canary is a Linux tool that uses pyudev to monitor devices while your computer is locked. In case it detects someone plugging in or unplugging devices it can be configured to send you an SMS or alert you via Slack of the potential security...
GitLab: Access to GitLab's Slack by abusing issue creation from e-mail
Hi there, I found a way to become a verified GitLab team member on Slack. By doing so, I gained access to dozens of channels possibly containing sensitive information. Note that I deleted my account intidchackerone immediately afterwards and did not join, read or engage with any of those channels...
Slack - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Slack published at the 'play' market has multiple vulnerabilities...
Distributed Security Alerting: Securitybot
Distributed Security Alerting Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber’s blog post . Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster and more...
Slack: Bypass to postMessage origin validation via FTP
@a1kmm- discovered a bypass to our postMessage origin check, wherein an attacker with existing MITM capabilities could use FTP to bypass validation and view XOXS tokens of victims on the local network. This was related to, and investigated at the same time as, a previous report. This issue is now...
Slack Fixes Cross-Origin Token Theft Bug
The cloud-based collaboration tool Slack was quick to fix a bug earlier this month that could have allowed an attacker to steal a user’s private Slack token. Frans Rosén, a knowledge advisor at the Swedish web security firm Detectify, uncovered the bug last week while poking around the service...
Slack: Stealing xoxs-tokens using weak postMessage / call-popup redirect to current team domain
@fransrosen discovered a vulnerability which would allow an attacker running a malicious site to steal XOXS tokens. We resolved the postMessage and call-popup redirect issues, and performed a thorough investigation to confirm that this had never been exploited. Thanks @fransrosen for an interesti...
Slack: Access of Android protected components via embedded intent
@bagipro found a vulnerability wherein a malicious and unprivileged app on the victim's phone could interact with any activity in the Slack Android app, allowing manipulation of the app in unintended ways. Thanks for the finding @bagipro! I found the following code inside com.Slack.ui.HomeActivit...
Slack: dom xss in https://www.slackatwork.com
https://www.slackatwork.com/wp-content/themes/twentyfifteen/genericons//example.html1...
Slack: Subdomain takeover on podcasts.slack-core.com
I noticed slack-core.com is used for Slack's call infrastructure. I had never seen that domain before, so I decided to find out what else was running on it. It turned out podcasts.slack-core.com was pointing to a Podcast and RSS hosting service called Feed.Press. However, there was no Feed.Press...
Slack: Eavesdropping on private Slack calls
A vulnerability exists in Slack's call functionality that allows a team member to eavesdrop on private ongoing Slack calls by inviting themselves into the conversation without the permission from either participant. By doing so they can eavesdrop on co-workers' private conversations as well as...
Slack: Information Disclosure on stun.screenhero.com
@kazan71p found an information disclosure vulnerability at stun.screenhero.com which revealed limited monitoring information. We fixed the vulnerability and conducted an investigation to confirm that this was not exploited. Thanks @kazan71p!...
