Sn1per Wiki

Attack Surface Management Platform | Sn1perSecurity LLC

Brought to you by: xer0dayz

Slack API Integration

Create your Slack app

To integrate Slack API notifications into Sn1per, you will need to create a new Slack application for notifications here: https://api.slack.com/start.

Give the new app a name (ie. Sn1per Notifications) and select a workspace to add your app to.
Click the "Add features and functionality" > "Incoming Webhooks" link.
Click the radio button to "Activate Incoming Webhooks" and copy the full webhook URL.
Append the value into your /root/.sniper_api_keys.conf file (ie. SLACK_WEBHOOK_URL="https://hooks.slack.com/services/Tff7kL/BG9fdf9/wddf93jvjffddjf893o").
Click the "OAuth & Permissions" link and click the "Add an OAuth Scope" under the "Scopes" section and add the "files:write" permission
Copy the "Bot User OAuth Access Token" value to your /root/.sniper_api_keys.conf file (ie. SLACK_API_TOKEN="xoxp-2dfefedf-f3554vf-123455353434-232355defdfff3f3f3f33g3g3").
Click the "Basic Information" link, then click the "Install your app to your workspace" link.

Updating your Sn1per API keys

After your Slack app has been setup, edit your /root/.sniper_api_keys.conf file and enter the appropriate values for the following:

SLACK_API_TOKEN="xoxp-2dfefedf-f3554vf-123455353434-232355defdfff3f3f3f33g3g3"
SLACK_WEBHOOK_URL="https://hooks.slack.com/services/T*ff7kL/BG9fdf9*/wddf93jvjffddjf893o"
SLACK_CHANNEL="sn1per-professional"

NOTE: If you don't have a /root/.sniper_api_keys.conf file, you will need to create it.

Next, update your /root/.sniper.conf file with the following values:

SLACK_NOTIFICATIONS="1"
SLACK_NOTIFICATIONS_THEHARVESTER="1"
SLACK_NOTIFICATIONS_EMAIL_SECURITY="1"
SLACK_NOTIFICATIONS_DOMAINS_NEW="1"
SLACK_NOTIFICATIONS_TAKEOVERS_NEW="1"
SLACK_NOTIFICATIONS_SUBOVER_NEW="1"
SLACK_NOTIFICATIONS_SUBJACK_NEW="1"
SLACK_NOTIFICATIONS_S3_BUCKETS="1"
SLACK_NOTIFICATIONS_SUBNETS="1"
SLACK_NOTIFICATIONS_DIRSEARCH_NEW="1"
SLACK_NOTIFICATIONS_SPIDER_NEW="1"
SLACK_NOTIFICATIONS_WHATWEB="1"
SLACK_NOTIFICATIONS_NMAP="1"
SLACK_NOTIFICATIONS_BRUTEFORCE="1"
SLACK_NOTIFICATIONS_WHOIS="1"
SLACK_NOTIFICATIONS_METAGOOFIL="1"
SLACK_NOTIFICATIONS_ARACHNI_SCAN="1"

After that's done, all you need to is run your Sn1per scans as normal to start receiving command output via your custom Slack channel.

NOTE: Slack legacy tokens are deprecated and must be updated as of Sn1per v8.7 to Slack application notifications.