RFC3966: Parsing phone numbers is hard :D
Did you know you can hide your payloads in phone numbers? āļøš±
ā INTIGRITI (@intigriti) December 17, 2022
RFC3966 specifies parameters for valid phone numbers that can contain characters. @securinti discovered that popular libraries are vulnerable and that it can lead to XSS and even ATO!š„#BugBountyTips #NahamCon2022EU pic.twitter.com/tNUVyZu7Oz