8 Slack API Integration

xer0dayz edited this page 2020-09-19 11:58:16 -07:00

Table of Contents

• Create your Slack app
• Updating your Sn1per API keys

Create your Slack app

To integrate Slack API notifications into Sn1per, you will need to create a new Slack application for notifications here: https://api.slack.com/start.

1. Give the new app a name (ie. Sn1per Notifications) and select a workspace to add your app to.
2. Click the "Add features and functionality" > "Incoming Webhooks" link.
3. Click the radio button to "Activate Incoming Webhooks" and copy the full webhook URL.
4. Append the value into your /root/.sniper_api_keys.conf file (ie. SLACK_WEBHOOK_URL="https://hooks.slack.com/services/Tff7kL/BG9fdf9/wddf93jvjffddjf893o").
5. Click the "OAuth & Permissions" link and click the "Add an OAuth Scope" under the "Scopes" section and add the "files:write" permission
6. Copy the "Bot User OAuth Access Token" value to your /root/.sniper_api_keys.conf file (ie. SLACK_API_TOKEN="xoxp-2dfefedf-f3554vf-123455353434-232355defdfff3f3f3f33g3g3").
7. Click the "Basic Information" link, then click the "Install your app to your workspace" link.

Updating your Sn1per API keys

After your Slack app has been setup, edit your /root/.sniper_api_keys.conf file and enter the appropriate values for the following:

SLACK_API_TOKEN="xoxp-2dfefedf-f3554vf-123455353434-232355defdfff3f3f3f33g3g3"
SLACK_WEBHOOK_URL="https://hooks.slack.com/services/T*ff7kL/BG9fdf9*/wddf93jvjffddjf893o"
SLACK_CHANNEL="sn1per-professional"

NOTE: If you don't have a /root/.sniper_api_keys.conf file, you will need to create it.

Next, update your /root/.sniper.conf file with the following values:

SLACK_NOTIFICATIONS="1"
SLACK_NOTIFICATIONS_THEHARVESTER="1"
SLACK_NOTIFICATIONS_EMAIL_SECURITY="1"
SLACK_NOTIFICATIONS_DOMAINS_NEW="1"
SLACK_NOTIFICATIONS_TAKEOVERS_NEW="1"
SLACK_NOTIFICATIONS_SUBOVER_NEW="1"
SLACK_NOTIFICATIONS_SUBJACK_NEW="1"
SLACK_NOTIFICATIONS_S3_BUCKETS="1"
SLACK_NOTIFICATIONS_SUBNETS="1"
SLACK_NOTIFICATIONS_DIRSEARCH_NEW="1"
SLACK_NOTIFICATIONS_SPIDER_NEW="1"
SLACK_NOTIFICATIONS_WHATWEB="1"
SLACK_NOTIFICATIONS_NMAP="1"
SLACK_NOTIFICATIONS_BRUTEFORCE="1"
SLACK_NOTIFICATIONS_WHOIS="1"
SLACK_NOTIFICATIONS_METAGOOFIL="1"
SLACK_NOTIFICATIONS_ARACHNI_SCAN="1"

After that's done, all you need to is run your Sn1per scans as normal to start receiving command output via your custom Slack channel.

NOTE: Slack legacy tokens are deprecated and must be updated as of Sn1per v8.7 to Slack application notifications.

Copyright (c) Sn1perSecurity - https://sn1persecurity.com