Credentials Leak

Table of contents

  1. Vulnerability
  2. Prerequisites
  3. Exploit
  4. Useful links
  5. Recommendations

Vulnerability

People generally use the same bunch of passwords everywhere, mixing work and personnal usage. Sometimes, a random website is compromised and credentials are leaked. Some website are specialized in colleting these leaked sensitive information and will disclose them to you for a bit of money.

Prerequisites

  • Internet connection.
  • Credit card.
  • Patience.

Exploit

Simply create and account on one or more website listed in Useful Links, pay depending on what you’re interested in, a start looking for leaked credentials based on domain name, username, email, etc.

Recommendations

  • Don’t use personnal passwords for a work context.
  • Use different passwords for every application.
  • Use a passwords manager to rule them all.