Login attempt by using dumped passwords from leakcheck.net or weleakinfo.to by scraped data 1. Dump passwords by entering scraped emails from leakcheck.net 2. Attempt to login twitter.com with scraped username, email and dumped passwords Password Reset in uncreated emails 1. Find uncreated or deleted email 2. Recreate it 3. Send password reset and click link arrived at recreated email These are just example, you can use them with your own method such as spamming, and so on