19 ms·
Technically this was possible before this. Since the email to each slack user is an @company.com address all you need to do is take control of the employees em
by DanBlake 8y ago
Technically this was possible before this.
Since the email to each slack user is an @company.com address all you need to do is take control of the employees email address, reset the slack password and login as the target user.
- reustle 8y ago> Since the email to each slack user is an @company.com address Not necessarily
- gburt 8y agoIt turns out administrators could change the email address anyway. :)
- vuln 8y agoRight?
- heedlessly2 8y agofor most companies slack channel, you would need the @company.com to get approved for slack access. Very rare and unprofessional to allow someone's personal email access