mirror of
https://github.com/HackTricks-wiki/hacktricks.git
synced 2025-10-10 18:36:50 +00:00
20 lines
884 B
Markdown
20 lines
884 B
Markdown
# 电话号码注入
|
||
|
||
{{#include ../banners/hacktricks-training.md}}
|
||
|
||
可以在**电话号码的末尾添加字符串**，这些字符串可能被用来利用常见的注入（XSS、SQLi、SSRF...）或甚至绕过保护：
|
||
|
||
<figure><img src="../images/image (461).png" alt="https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0"><figcaption></figcaption></figure>
|
||
|
||
<figure><img src="../images/image (941).png" alt="https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0"><figcaption></figcaption></figure>
|
||
|
||
**OTP 绕过 / 暴力破解** 将这样工作：
|
||
|
||
<figure><img src="../images/image (116).png" alt="https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0"><figcaption></figcaption></figure>
|
||
|
||
## 参考
|
||
|
||
- [https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0](https://www.youtube.com/watch?app=desktop&v=4ZsTKvfP1g0)
|
||
|
||
{{#include ../banners/hacktricks-training.md}}
|