Skip to content

Identity Verification is not setup on the Intercom widget, allowing an attacker to impersonate a user and access their chat history. reference:

Notifications You must be signed in to change notification settings

MuhammadWaseem29/intercom-exploit

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

IntercomVulnChecker

Tool: exploit.py
Purpose: Identifies Intercom Identity Verification Misconfiguration vulnerabilities.
Author: Muhammad Waseem
Version: 1.0

Usage

  • Single URL: python3 exploit.py -u https://example.com
  • File Input: python3 exploit.py -f urls.txt
    IntercomVulnChecker Screenshot IntercomVulnChecker Screenshot image

Installation

pip3 install requests termcolor
git clone https://github.com/MuhammadWaseem29/intercom-exploit.git

Description

Detects misconfigured Intercom widgets lacking identity verification, risking user impersonation.

References

Legal Notice

For authorized security testing only. Unauthorized use is prohibited.

About

Identity Verification is not setup on the Intercom widget, allowing an attacker to impersonate a user and access their chat history. reference:

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages