Many server logs or application error logs inadvertently record the full HTTP request sent during a login attempt. If not properly sanitized, the are written directly into a .log or .txt file. 2. Automated Harvesting
allintext:username filetype:log passwordlog facebook install allintext username filetype log passwordlog facebook install
:
allintext username filetype log passwordlog facebook install Many server logs or application error logs inadvertently