Phishing for Slack-tokens
Slack (and other Electron apps) often use cookies to store session/access tokens. Perhaps we can extract and use these tokens for phishing awareness training?
phishing
Creating fake alerts in phishing emails
Use CSS and HTML to hide and replace administrator injected alerts in Office 365