logo

Introducing SlackEnum: A User Enumeration Tool for Slack

ID: 7a1481d5-b6e9-5232-87b7-74ff6fb05c95

STIX ID: report--7a1481d5-b6e9-5232-87b7-74ff6fb05c95

Feed Name: Black Hills Infosec Blog

Date Published: 2024-06-27

Date Updated: 2026-04-27

Author: BHIS

...
...

**Executive summary:** This post presents SlackEnum, a proof-of-concept tool and operational workflow to enumerate Slack users at scale by querying Slack’s connectableContacts.lookup endpoint and bypassing rate limits through the use of many attacker-controlled Slack accounts; it documents account creation, token extraction, automation details, rate-limit handling, and output formats, serving as a technical TTP that could be used for legitimate red‑team testing or abused by malicious actors.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.