2 ms·
Looks like they found a similar "3rd party email service / subdomain MX record" exploit with Slack.[1] Although not so severe in Slack's case because it's a les
by abalone 10y ago
Looks like they found a similar "3rd party email service / subdomain MX record" exploit with Slack.[1] Although not so severe in Slack's case because it's a lesser used feature. Looks like Slack is using Mailgun.[2]
[1] http://blog.pentestnepal.tech/post/150381068912/how-i-snooped-into-your-private-slack-messages http://blog.pentestnepal.tech/post/150381068912/how-i-snoope...
[2] http://mxtoolbox.com/SuperTool.aspx?action=mx%3aslack.com&run=toolpage http://mxtoolbox.com/SuperTool.aspx?action=mx%3aslack.com&ru...