Slack
Last updated
Last updated
To pentest your Slack bot with Probe, you’ll need to provide the bot’s ID in the Slack User Bot ID field:
On Slack's home screen, search for Apps
Under Apps, click on your bot's name to open its profile.
Open the details and find Member ID and click the copy button next to it
Paste this ID into the Slack User Bot ID field within the Probe platform
Slack integration operates in two modes.
Direct message
In this mode Probe sends messages to channels without any modifications (like adding a mention tag at the beginning). When a message is sent, Probe waits for the target to respond inside the same channel.
Mention
In this mode Probe mentions the target in messages sent to the channel, and continues the conversation inside the thread. Messages inside the thread do not mention the target.
To install Slack integration to your workspace, click the Connect new workspace button. You will then be prompted to log in to your Slack workspace. Once logged in, you will be asked to authorize the Probe integration for your workspace, with a detailed overview of the permissions the app will receive upon installation.
Once finished, to view your newly added workspace, click the refresh button next to the workspace dropdown on the Probe platform.
After you install the integration bot to the workspace you will need to create channels where bots (Probe and the target) will communicate.
To enable integration to chat with your bot, you will need to create the private channels. In each created channel you should then add your target and Probe integration. You can do this by following these steps:
Create channels without adding any additional users (we recommend creating at least 4 channels)
Add your target by typing commands: /invite @YourAppName
and /invite @SplxAI Probe
, or you can follow the steps from Figure 6.
Optional: Mute notifications for created channels
After creating the channels, go to the Channels section on Slack’s home screen. Open your private channels, click on Details, and locate the Channel ID. Copy this ID and paste it into the Channels field in the Probe integration tab (similar to obtaining the Slack User Bot ID).
While your Slack bot is generating its response, various loading messages may be displayed to the user (e.g., “Please wait, generating response…”). To ensure Probe ignores these messages and waits for the bot’s final response, enter the regular expression (regex) for the constant part of the loading message in the Loading Messages section. For example:
Loading message: “Please wait, generating response…”
Regex: ^Please wait, generating response.*$
You can enter multiple loading messages that should be ignored by Probe.
When you start your Probe, Slack integration will look through all private channels, of which it is part, and it will select all channels containing targets. When the backend starts sending messages integration will distribute them across created channels, and wait for your bot to respond.