Improper phone number validation to account takeover

  1. Visit the signup page: https://redacted.com/signup
  2. Give any russian phone number you can get it from receive-sms-online
  3. intercept the request and change it to your number and you will receive a call with OTP
  4. Input this OTP and intercept on -> click on verify and again change the country code and number
  5. You’re logged in as the Russian number user and same works with Login.

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store