Bruteforcing the phone number of any Google user
brutecat.com
From rate limits to no limits: How IPv6's massive address space and a crafty botguard bypass left every Google user's phone number vulnerable
  • IllNess@infosec.pubEnglish
    8·
    1 day ago

    Eventually, I had a PoC running, but I was still getting the captcha? It seemed that for whatever reason, datacenter IP addresses using the JS disabled form were always presented with a captcha, damn!

    The simplest answer is probably the right one. They are used for bots.