Query.aspx | Offer.ntc.net.np Volume

It looks like you’re asking for a write‑up or explanation regarding a page named under the subdomain offer.ntc.net.np — which belongs to Nepal Telecom (NTC) .

:

If you are a user trying to check your data volume — and the page is inaccessible — use the official NTC mobile app or dial *1415# (typical data balance USSD) instead. Offer.ntc.net.np Volume Query.aspx

| Issue | Potential risk | |-------|----------------| | No OTP / weak CAPTCHA | Bots can query any number | | IDOR in URL parameters | Changing ?msisdn=98xxxxxxx to another number leaks data | | SQL injection in msisdn parameter | Database compromise | | Missing rate limiting | Mass query of user volumes (privacy breach) | | Clear text transmission (HTTP instead of HTTPS) | Interception of phone numbers & usage data | : As of recent years, NTC uses HTTPS, but legacy portals sometimes have mixed content or weak ciphers. 6. Example Request/Response (Hypothetical) GET https://offer.ntc.net.np/Volume Query.aspx?msisdn=9841234567 It looks like you’re asking for a write‑up

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.

Close