Toutiao.com's penetration test (small movies are highlighted)

Toutiao.com's penetration test (small movies are highlighted)

Toutiao.com

Test it.



1. Information Collection:



Direct Weibo
 

http://s.weibo.com/user/&work=%25E4%25BB%258A%25E6%2597%25A5%25E5%25A4%25B4%25E6%259D%25A1

 

Found the name + QQ + mail about 20 +



2. Analysis and testing:

Find a common one:



Various Google bing libraries ~ Password phone number settled
 

Wang Wei [email protected] 04035016b 04035016 [email protected] 156523 *** 82 wade_bytedance

3. check:



HR:
 

Mail Google's [Use Foxmail if you don't know the mobile phone number]
 

Share:
 

Network Disk of the team:
 

 

Small movies... Highlighted ~~



Public AppStore will not be released


 

Doc:
 

 

Other monitoring umeng or something:
 

 

 

 

 

OpenVPN method 1. about VPN login account openvpn username and password: unified account authentication management system ii. WINDOWS Installation Diagram 1. download the openvpn windows Version (only 64-bit download is available for the Intranet. For other versions, go to the official website to download the corresponding version ).

OK.



Let's talk about Wang weizan:


 

2012.05-toutiao Internet/mobile internet/e-commerce frontend owner 2012.05-current work location: Beijing has been in the company for nearly two years since its start-up, and is solely responsible for all frontend jobs, including websites, nested app pages, media platforms, and advertising platforms. and so on. so far, I have recruited a second partner.

You can change the password of your account.



OK

 

800 + emails

Solution:

Security awareness

Company accounts are prohibited from disclosing their leaked passwords.