EvilSlackbot: A Slack Attack Framework

I created this Slack attack framework for red teams and pentesters conducting Phishing simulations within Slack workspaces. EvilSlackbot utilizes xoxb bot tokens and allows you to send Spoofed bot messages, phishing links, files, and search Slack for leaked secrets via a keyword search.

This tool can also be used to automate slack phishing exercises, by feeding EvilSlackbot a list of emails you would like to test by sending them simulated phishing messages.

attack attack framework bot exercises files framework leaked leaked secrets links messages netsec phishing phishing links red teams search secrets send simulations slack spoofed teams tokens tool