From 3cfabd176312d5bf7eda1be88c570448e975b418 Mon Sep 17 00:00:00 2001
From: Nadino92 <Nadino92@users.noreply.github.com>
Date: Tue, 5 May 2020 13:01:22 +0200
Subject: [PATCH] Slack access token

Fetch the slack access token for both bot/person
---
 tokens/slack-access-token.yaml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 tokens/slack-access-token.yaml

diff --git a/tokens/slack-access-token.yaml b/tokens/slack-access-token.yaml
new file mode 100644
index 0000000000..5ddd4a7b0e
--- /dev/null
+++ b/tokens/slack-access-token.yaml
@@ -0,0 +1,26 @@
+id: slack-access-token
+
+#xoxp-702234529XXX-688970480XXX-109182524XXXX-87fa5b4d2e62ac5c16fc6ea93bXXXXXX
+#xoxb-702234529XXX-1076883857XXX-Ou9aRuvtFZ4DuTsepevXXXXX
+
+info:
+  name: Slack access token
+  author: nadino
+  severity: medium
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/"
+    matchers:
+      - type: regex
+        part: body
+        regex:
+          - "xoxp-[0-9A-Za-z\\-]{72}"  #person
+          - "xoxb-[0-9A-Za-z\\-]{51}"  #bot
+    extractors:
+      - type: regex
+        part: body
+        regex:
+          - "xoxp-[0-9A-Za-z\\-]{72}"
+          - "xoxb-[0-9A-Za-z\\-]{51}"