toke_em

macOS Post-Exploitation Slack "Legacy" OAUTH Token dumper

Extracts "Legacy" OAUTH tokens from the Slack's LevelDB local storage and tests them for freshness.

More info on legacy tokens : https://api.slack.com/docs/token-types#legacy

After you get your tokens check out https://slack.com/api/rtm.start?token=<YOUR_TOKEN_HERE>&pretty=1 ;)

n0ncetonic Blacksun Research Labs