Bug Bounty Hunting Essentials

Embedding malicious links to infect other users on Slack

The most destructive misuse of this vulnerability is to infect other users via malicious JavaScript links; this is a classic example of attack pivoting. Consider if an attacker gains access to a team member's account on Slack and wants to expedite the process further to compromise other team members via an application's vulnerability, then this would have been the target of the attack.