Browse / Slack

Slack

See its reports on the map

Attack surface: 137,429 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Slack

• Cross-site Scripting33
• Misconfiguration17
• Authentication16
• Information Disclosure12
• Code Execution11
• Access Control10

Most upvoted reports

AllValidInformativeN/ADuplicate

1. CSV export/import functionality allows administrators to modify member and message content of a workspaceInformativePrivilege Escalation
   $25011 votes
2. Open redirect vulnerability InformativeOpen Redirect
   11 votes
3. Email enumerationInformativeInformation Disclosure
   8 votes
4. Remote file Inclusion - RFI in uploadInformativeCode Injection
   7 votes
5. Session Fixation disclosing email addressInformativeInformation Disclosure
   7 votes
6. User impersonation is possible with incoming webhooksInformativeViolation of Secure Design Principles
   3 votes
7. Content SpoofingInformativeViolation of Secure Design Principles
   3 votes
8. Unauthenticated Access to some old file thumbnails InformativeImproper Authentication - Generic
   2 votes
9. open redirect in https://slack.comInformativeOpen Redirect
   2 votes
10. TLS1/SSLv3 Renegotiation VulnerabilityInformativeCryptographic Issues - Generic
    2 votes
11. Open Redirect in SlackInformativeOpen Redirect
    2 votes
12. Deleting Teams implemenationInformativeImproper Authentication - Generic
    2 votes
13. Link vulnerability leads to phishing attacksInformativeViolation of Secure Design Principles
    1 votes