Slack

Hacking Slack using postMessage and WebSocket-reconnect to steal your precious token

Frans Rosén postmessage Slack

Popular tags XSS Detectify Crowdsource Frans Rosén bug bounty Detectify

Frans Rosén Slack XSS

Using Chrome’s web-custom-data UTI to inject a stored XSS in Slack

September 1, 2016

Slack Slackbots token

Slack bot token leakage exposing business critical information

April 28, 2016