maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
hacktricks/src/pentesting-web/phone-number-injections.md

884 B
Raw Blame History

电话号码注入

{{#include ../banners/hacktricks-training.md}}

可以在电话号码的末尾添加字符串，这些字符串可能被用来利用常见的注入（XSS、SQLi、SSRF...）或甚至绕过保护：

https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0
https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0

OTP 绕过 / 暴力破解 将这样工作：

https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0

参考

{{#include ../banners/hacktricks-training.md}}