Slack Watchman
Did you know that Slack provides some surprising information about a workspace to unauthenticated callers? Slack Watchman knows, and in this post I’m going to show you the information you can enumerate from a workspace, and how you can use the ‘unauthenticated probe’ functionality of Slack Watchman to get
Slack Watchman
The new version 4.0.0 release of Slack Watchman contains some major upgrades and new features: Centralised signatures The biggest upgrade, in terms of maintenance, to Slack Watchman is the move to store and pull signatures from a centralised repository GitHub - PaperMtn/watchman-signatures: Signature base for Watchman applications
Tradecraft
This post has been updated in December 2025 to account for changes to Slack authentication since it was originally written. Slack, like many other services, uses cookies to store authentication and session information. What is interesting with Slack, however, is that one particular cookie can be used to generate a
Slack Watchman
In what should be the last major version bump for a while, today I release Slack Watchman 3.0.0. This update adds some transformational features that help move Slack Watchman into the realms of being a truly useful solution for enterprise. Slack Watchman is available on GitHub: https://github.
Slack Watchman
The past housebound weeks have given me time to continue working on Slack Watchman, and i've now reached the stage of releasing version 2.0.0 The release is available on GitHub: https://github.com/PaperMtn/slack-watchman/releases/tag/2.0.0 The latest version is always available
Slack Watchman
About Slack Watchman is an application I have created to search through Slack workspaces and look for sensitive information posted in public chats/channels. This information is then returned to you in the form of CSV files. You can find the project on GitHub here With the whole environment moving