A city tester pastes cleartext passwords used for pivots into a shared team chat. What is wrong with that practice?
Select an answer to reveal the explanation.
Short Explanation
Passwords are not hallway gossip. Dumping cleartext pivot creds into shared chat is like taping the master key to the break-room fridge. Treat those secrets with the same care you would give anything that lands in the final report.
Full Explanation
Credentials obtained or reused during lateral movement remain sensitive throughout the engagement. Placing them in unprotected shared chat expands exposure beyond the testing team and client controls. Mid-pivot secrets deserve the same handling standards as report appendices and vaulted evidence. Poor secret hygiene is itself a professional failure mode.