Slack

com.Slack (23.08.40.0)

Security Rating

6.4

AVERAGE

DOWNLOAD REPORT

VIEW CERTIFICATE

HIDE REPORT

SHARE

Use BeVigil on your Phone

Download the BeVigil App

OPEN REPORT MENU

SUMMARY

ISSUES SEVERITY

MANIFEST SCANNER

exported activity

MEDIUM

resources/AndroidManifest.xml

VULNERABILITIES

Weak Crypto Algorithms

MEDIUM

sources/slack/features/notifications/diagnostics/NotificationDiagnosticsPresenter$runDiagnostics$1.java

STRINGS

google api key

LOW

resources/res/values/strings.xml

ASSETS

file path

LOW

resources/res/values-en-rGB/strings.xml

0 CRITICAL severity MANIFEST issues present

0 HIGH severity MANIFEST issues present

6 MEDIUM severity MANIFEST issues present

0 LOW severity MANIFEST issues present

0 INFO severity MANIFEST issues present

0 RESILIENCE severity MANIFEST issues present

0 CRITICAL severity VULNERABILITIES issues present

0 HIGH severity VULNERABILITIES issues present

24 MEDIUM severity VULNERABILITIES issues present

12 LOW severity VULNERABILITIES issues present

17 INFO severity VULNERABILITIES issues present

0 RESILIENCE severity VULNERABILITIES issues present

0 CRITICAL severity STRINGS issues present

0 HIGH severity STRINGS issues present

53 MEDIUM severity STRINGS issues present

108 LOW severity STRINGS issues present

0 INFO severity STRINGS issues present

0 RESILIENCE severity STRINGS issues present

0 CRITICAL severity ASSETS issues present

0 HIGH severity ASSETS issues present

1 MEDIUM severity ASSETS issues present

2139 LOW severity ASSETS issues present

0 INFO severity ASSETS issues present

0 RESILIENCE severity ASSETS issues present

ISSUES

Weak Crypto Algorithms - 4 issues

Non-parameterized SQL Query - 15 issues

Super user privileges may be requested - 5 issues

Tapjacking attack prevention by app - 1 issues

Possible Object Deserialization - 2 issues

CBC Padding Oracle Attack Possible - 1 issues

WebView ignores SSL errors - 1 issues

Insecure Random Used - 17 issues

WebView javascript and file access enabled - 1 issues

WebView javascript enabled - 1 issues

Check for rooted device by app - 2 issues

Sensitive Information in Logs - 2 issues

Storage of sensitive information in Shared Preferences - 1 issues

MALWARES

0

MALWARES

APKiD

4

APKiD

STRINGS

Google API Key - 2 matches

Generic API Key - 1 matches

Possible Secret Detected - 53 matches

Unknown High Entropy String - 98 matches

Possible UUID - 7 matches

ASSETS

File path - 838 matches

URL - 851 matches

Hostname - 164 matches

Filename - 26 matches

REST API - 161 matches

Relative Endpoint - 5 matches

PERMISSIONS SUMMARY

Permissions

Count

Safe

11

Risky

7

Dangerous

0

ASSETS WORDCLOUD

slack.com - 20 count

get.slack.help - 13 count

account.box.com - 13 count

bakery.tinyspeck.com - 13 count

play.google.com - 13 count

slack-gov.com - 14 count

shaped-apogee-817.firebaseio.com - 1 count

www.slack.com - 1 count

assets7.lottiefiles.com - 1 count

github.com - 2 count

quip.com - 1 count

quip.codes - 3 count

staging.quip.com - 1 count

quip.tools - 1 count

admin.quip.com - 1 count

TRACKERS

3

TRACKERS

THIRD PARTY LIBRARIES

72

THIRD PARTY LIBRARIES

CONTACT

Website

http://slack.com

Email

[email protected]

HIDE REPORT

Are you the developer or owner of this app? Choose to keep your report private from BeVigil's Search for 30 days.

HIDE

Slack brings team communication and collaboration into one place so you can get more work done, whether you belong to a large enterprise or a small business. Check off your to-do list and move your projects forward by bringing the right people, conversations, tools, and information you need together. Slack is available on any device, so you can find and access your team and your work, whether you’re at your desk or on the go.<br><br>Use Slack to: <br>• Communicate with your team and organize your conversations by topics, projects, or anything else that matters to your work<br>• Message or call any person or group within your team<br>• Share and edit documents and collaborate with the right people all in Slack <br>• Integrate into your workflow, the tools and services you already use including Google Drive, Salesforce, Dropbox, Asana, Twitter, Zendesk, and more<br>• Easily search a central knowledge base that automatically indexes and archives your team’s past conversations and files<br>• Customize your notifications so you stay focused on what matters<br><br>Scientifically proven (or at least rumored) to make your working life simpler, more pleasant, and more productive. We hope you’ll give Slack a try.<br><br>Stop by and learn more at: https://slack.com/<br><br>Having trouble? Please reach out to [email protected]