hacktricks/pentesting-web/phone-number-injections.md
carlospolop 2197a2102f f
2023-04-05 17:19:27 +02:00

3.6 KiB

Phone Number Injections

HackTricks in 🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥

It's possible to add strings at the end the phone number that could be used to exploit common injections (XSS, SQLi, SSRF...) or even to bypass protections:

OTP Bypass / Bruteforce would work like this:

References

HackTricks in 🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥