diff --git a/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Slack/Slack.cs b/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Slack/Slack.cs
new file mode 100644
index 0000000..592ef30
--- /dev/null
+++ b/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Slack/Slack.cs
@@ -0,0 +1,55 @@
+using System;
+using System.IO;
+using winPEAS.Helpers;
+using winPEAS.Info.UserInfo;
+
+namespace winPEAS.KnownFileCreds.Slack
+{
+ internal static class Slack
+ {
+ const string SlackBasePath = @"AppData\Roaming\Slack\";
+
+ internal static void PrintInfo()
+ {
+ Beaprint.MainPrint("Slack files & directories");
+
+ Beaprint.ColorPrint(" note: check manually if something is found", Beaprint.YELLOW);
+
+ var userDirs = User.GetUsersFolders();
+
+ foreach (var userDir in userDirs)
+ {
+ try
+ {
+ var userSlackDir = Path.Combine(userDir, SlackBasePath);
+
+ if (Directory.Exists(userSlackDir))
+ {
+ Beaprint.BadPrint($" Directory: {userSlackDir}");
+
+ var userSlackCookiesFile = Path.Combine(userSlackDir, "Cookies");
+ if (File.Exists(userSlackCookiesFile))
+ {
+ Beaprint.BadPrint($" File: {userSlackCookiesFile}");
+ }
+
+ var userSlackWorkspacesPath = Path.Combine(userSlackDir, @"storage\slack-workspaces");
+ if (File.Exists(userSlackWorkspacesPath))
+ {
+ Beaprint.BadPrint($" File: {userSlackWorkspacesPath}");
+ }
+
+ var userSlackDownloadsPath = Path.Combine(userSlackDir, @"storage\slack-downloads");
+ if (File.Exists(userSlackDownloadsPath))
+ {
+ Beaprint.BadPrint($" File: {userSlackDownloadsPath}");
+ }
+ }
+ }
+ catch (Exception)
+ {
+ }
+ }
+ }
+ }
+}
diff --git a/winPEAS/winPEASexe/winPEAS/winPEAS.csproj b/winPEAS/winPEASexe/winPEAS/winPEAS.csproj
index 59f2360..b589a39 100755
--- a/winPEAS/winPEASexe/winPEAS/winPEAS.csproj
+++ b/winPEAS/winPEASexe/winPEAS/winPEAS.csproj
@@ -21,7 +21,7 @@
full
false
bin\Debug\
- DEBUG;TRACE
+ TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF
prompt
4
false
@@ -33,7 +33,7 @@
pdbonly
true
bin\Release\
- TRACE
+ TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF
prompt
4
false
@@ -47,7 +47,7 @@
true
bin\x64\Debug\
- TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF
+ TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF
full
AnyCPU
8.0
@@ -59,7 +59,7 @@
bin\x64\Release\
- TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF
+ TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF
true
pdbonly
x64
@@ -72,7 +72,7 @@
true
bin\x86\Debug\
- DEBUG;TRACE
+ TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF
full
x86
8.0
@@ -83,7 +83,7 @@
bin\x86\Release\
- TRACE
+ TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF
true
pdbonly
x86
@@ -285,8 +285,6 @@
-
-
@@ -456,6 +454,7 @@
+