3 ms·
I've built a simple Twilio script that shows how easy it is to exploit this here: http://edlea.net/ http://edlea.net/ Vistors on an O2 phone will receive an SM
by edlea 15y ago
I've built a simple Twilio script that shows how easy it is to exploit this here: http://edlea.net/ http://edlea.net/
Vistors on an O2 phone will receive an SMS on their first visit. An MD5 hash of their MSISDN is kept in memory to prevent multiple SMS being sent.
- sfgfdhgfdshdhhd 15y agoFYI: this is trivially spoofable. I just sent a couple of texts to non-O2 friends by changing my browser headers. Thought about writing a Python script to run through the space of +447740[1-9][0-9]{5} numbers, but thought better of it.