Phone Number Injections
AWS 해킹 배우기 및 연습하기:HackTricks Training AWS Red Team Expert (ARTE)
GCP 해킹 배우기 및 연습하기:
HackTricks Training GCP Red Team Expert (GRTE)
전화번호의 끝에 문자열을 추가하는 것이 가능하며, 이는 일반적인 주입(XSS, SQLi, SSRF...)을 악용하거나 보호를 우회하는 데 사용될 수 있습니다:
![https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0](https://book.hacktricks.xyz/~gitbook/image?url=https%3A%2F%2F311514708-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252F1ImEu59kE9yiIA7SmB7z%252Fuploads%252Fgit-blob-c873e2078d9ad54ea739c40f84f18beb2a93d1ab%252Fimage%2520%28461%29.png%3Falt%3Dmedia&width=768&dpr=4&quality=100&sign=c29c9dd1&sv=1)
![https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0](https://book.hacktricks.xyz/~gitbook/image?url=https%3A%2F%2F311514708-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252F1ImEu59kE9yiIA7SmB7z%252Fuploads%252Fgit-blob-ec4d7c9ffab976879c93cd153324f7d661f51fbb%252Fimage%2520%28941%29.png%3Falt%3Dmedia&width=768&dpr=4&quality=100&sign=7a30ae59&sv=1)
OTP 우회 / 무차별 대입은 다음과 같이 작동합니다:
![https://www.youtube.com/watch?app=desktop\&v=4ZsTKvfP1g0](https://book.hacktricks.xyz/~gitbook/image?url=https%3A%2F%2F311514708-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252F1ImEu59kE9yiIA7SmB7z%252Fuploads%252Fgit-blob-9a74fb3f34e52813fd0192baa915c1c6f9171288%252Fimage%2520%28116%29.png%3Falt%3Dmedia&width=768&dpr=4&quality=100&sign=4036ab7e&sv=1)
참고자료
AWS 해킹 배우기 및 연습하기:HackTricks Training AWS Red Team Expert (ARTE)
GCP 해킹 배우기 및 연습하기:
HackTricks Training GCP Red Team Expert (GRTE)
Last updated