[likju]

What is you best way to gain initial access? I saw a lot of TTPs of some persons who uses IR logs to get access to a mid company server without 2FA, but most of the times free logs have bad credentials(roblox and discord shit), so whats your favorite way to get access to a critical server containing juicy info?

[phas3lock]

Auth bypasses, if not then leaked creds in github

[clementinemark]

Auth bypasses, if not then leaked creds in github

How do you find leaked credentials on github?

[phas3lock]

Auth bypasses, if not then leaked creds in github

How do you find leaked credentials on github?

github dorks

[clementinemark]

Auth bypasses, if not then leaked creds in github

How do you find leaked credentials on github?

github dorks

May I have a link? I need a particular gmail.

[phas3lock]

Auth bypasses, if not then leaked creds in github

How do you find leaked credentials on github?

github dorks

May I have a link? I need a particular gmail.

https://vsec7.github.io/

[clementinemark]

Auth bypasses, if not then leaked creds in github

How do you find leaked credentials on github?

github dorks

May I have a link? I need a particular gmail.

https://vsec7.github.io/

I'm having trouble figuring out how this works...