writeups.xyz / How we abused Slack's TURN servers to gain access to internal services

Submitter : c2a

Date: 6 April 2020

Bounty : 3,500

Vulnerabilities :

• SSRF
• TURN
• WebRTC

Programs :

• Slack

Authors :

• Sandro Gauci (@Sandrogauci)

Link :
https://www.rtcsec.com/article/slack-webrtc-turn-compromise-and-bug-bounty/