Slack Webhook Url

Description

The source code repository contains sensitive information: Slack Incoming Webhook URL

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Slack Incoming Webhook URL patterns in source code and configuration files

Vulnerable code example

SLACK_WEBHOOK=https://hooks.slack.com/services/T01234ABCD/B01234ABCD/abcdefghijklmnopqrstuvw
https://hooks.slack.com/services/TXXXXXXXX/BXXXXXXXX/XXXXXXXXXXXXXXXXXXXXXXX