1
We abused Slack's TURN servers to gain access to internal services
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.
A blog about vulnerabilities and attacks affecting VoIP and WebRTC applications and infrastructure by Enable Security
Visit rtcsec.com → RSS feedOn Hacker News Apr 2020 – Apr 2020
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.