@raviojhax: did I just find every single org that uses slack?! this list is over 130k lines

its missing my org.. maybe the list goes on!

plug: a pack of curated collection of grok @bot by role

Lol check : at your own risk https://crt.name/v1/search?apex=yahoo.com…

melvin needs to paginate this lol

omg!!! public dns records!!! hacker!!!

ssshh.. dont ruin my hacker moment

the comment section is just guys arguing about dns records and missing the point. 130k slack workspaces is a goldmine for sales teams and you know it

yeah, devs can't think that way even if 0.01% of this converts for my product @ticketpingcom it's a win!

imagine you enrich this list and pitch your product crazy potential

ikr! that was my first thought too.. this is like gold mine for Ticketping

Doesnt cover enterprise. A few of orgs I am part of are missing.

I think these are the ones created before slack switched to wildcard subdomains

yes, this data was always publicly available, and we can see all subdomains mapped to a particular domain

yeah, never occurred to me to search it to look for orgs using slack

Doesn't work with aws apps

This workload is way too huge. Staring at it will make your eyes sore, right?

I can only imagine how long the list for Wix and Wordpress would be 😂

the fact this thing just lists em all out is kinda insane, 130k+ and counting.

Whyyyy are they not using wildcard certs?

As a former Slack employee I am lol’ing

dudes learn about DNS records and think they are hackers

No no no now the marketing agents will find this too!

This is why I always anonymize public DNS addresses...

Lowkey the same with all orgs that use okta https://crt.name/v1/search?apex=okta.com…

Did http://crt.sh die or something

I don’t think so. For orgs, they use a wildcard record. It first tries to match that list then falls back to the wildcard which contains the business logic in the application layer. Subdomain is mapped to workspace username and if it’s not found, you get a page like this.

why the heck would'nt they just use *.slack.com

How is this any different to using Dig commands?

it's not a full list, missing the company i work for

Yeah so what? Do you all of your DNS records are also public?

No yr looking at stale BS . That script is whack.

Nope, my org is not

my orgs not on there so seems not

yep my former company is in that list lmao

very cool!

tweets that start with “did I just” always suck

Doesn't load for me :(

Email each company selling your own slack clone

Rookie numbers https://crt.name/v1/search?apex=traefik.me…

Jesus people have found CRT

i hate people thinking this is new technique, full of normies here. http://crt.sh is so 2007

What is futuristparty

checked my internal domain at work and it doesn’t grab everything.

now try with

Local man discovers certificate transparency.

I’m not sure but it looks like you might have uncovered several conspiracies…

seems like a lot of random shit too

That's amazing!

Did you just learn about CT logs and dns enumeration? Are you retarded?

Try http://palantirfoundry.com next

so like every company on the planet is chilling in here huh, 130k lines of pure slack realness

for real this is basically the whole damn business world in one list, 130k+ lines of orgs just sittin there waiting for a cold email

finding 130k lines of orgs that use Slack is a goldmine for a sales team.

Arrest him

honestly just scrolled past this and my jaw dropped, 130k lines of every slack org out there just sittin in one place. wild.

exactly

Bro wtf

Who is gonna tell them? :)

130k orgs are learning their 'private' slack workspace was a dns record the whole time.

Slack changed to a wildcard certificate. So you wont find any of those.

Slack is the superior product over the Teams hellscape

nope

Probably only those onboarded before Slack switched to wildcard certs. Let's Encrypt didn't have them when they started.

alphabetize it

That’s the ICP list of http://buzz.xyz if I was @jack I’d contact them all

jeetmaxxing here