-
Notifications
You must be signed in to change notification settings - Fork 109
Open
Description
Unlike pinned messages, if the passwords, aws-keys.txt, private-keys, urls are not found it is not acknowledged properly.
In case of specific harvesting, such as for example only credential-scan an empty folder is created inspite of no harvested data.
Steps to reproduce
- Replace
CREDENTIAL_REGEXwith a random value such that it does not match any message.
CREDENTIAL_REGEX=r"lorem ipsum xyz abc mno"
Line 92 in 5014833
CREDENTIALS_REGEX = r"(?i)(" \
and replaceCREDENTIALS_QUERIESwith random value.
CREDENTIALS_QUERIES = ["lorem"]
Line 38 in 5014833
CREDENTIALS_QUERIES = ["password:", "password is", "pwd", "passwd"] - Run
$ ./SlackPirate.py --token xoxs-xxxxx --credential-scan - Observe creation of a new folder but no
passwords.txtcreated.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels