+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Blackhat Training (https://hackforums.net/forumdisplay.php?fid=405)
+---- Thread: OTP? seriously what works! (/showthread.php?tid=6273409)
OTP? seriously what works! - ziyo - Jun 16, 2024
seriously... anybody?
RE: OTP? seriously what works! - Binance - Jun 16, 2024
Reactive phishing pages.
You obviously wont be able to brute them
RE: OTP? seriously what works! - DramaKing - Jun 16, 2024
Like TOTP or what do you mean?
RE: OTP? seriously what works! - Fludems - Jun 17, 2024
If you actually asked a question you'd probably get an answer
OTP can't be brute-forced, but as others have said, reactive phishing pages can work.
If you also have backdoor access to the users machine you can just cross reference the OTPs they've typed with the timestamp and figure it out that way, you can also social engineer it etc
There isn't any magical trick