3 ms·
Technically this was possible before this. Since the email to each slack user is an @company.com address all you need to do is take control of the employees em
by DanBlake 9y ago
Technically this was possible before this.
Since the email to each slack user is an @company.com address all you need to do is take control of the employees email address, reset the slack password and login as the target user.
- reustle 9y ago> Since the email to each slack user is an @company.com address Not necessarily
- gburt 9y agoIt turns out administrators could change the email address anyway. :)
- vuln 9y agoRight?
- heedlessly2 9y agofor most companies slack channel, you would need the @company.com to get approved for slack access. Very rare and unprofessional to allow someone's personal email access