Skip to content
Leaking the phone number of any Google user
brutecat.com | blog | #privacy | #ipv6 | #enumeration | #google | #account-recovery | #rate-limit-bypass | #botguard
Summary
A Google username recovery endpoint allowed checking phone number ownership; rotating IPv6 addresses from a /64 subnet beat rate limits, and JS-form BotGuard tokens bypassed the captcha wall.
- Published
- Collected