Find OTP Vulnerabilities

Analyze the mitmproxy dump (log.txt) for OTP issues for: $ARGUMENTS

Requires: log.txt in the current directory. If it's missing, capture traffic first:

mitmdump --set flow_detail=3 2>&1 | tee log.txt

Vulnerability Types

1. OTP in Response

• OTP returned in API response body
• OTP in page source/JavaScript
• OTP in error messages
• Should only be sent via SMS/email, never in API response