hunt-open-redirect

What problem does it solve?

Open redirects alone are typically low risk but can be chained to privilege-escalating flows like OAuth token theft (ATO) and phishing. By identifying and classifying redirect parameters, this skill helps you map potential attack chains and prioritize remediation or responsible disclosure.

Core Features & Use Cases

• Identify redirect parameters such as ?redirect=, ?next=, ?return= to discover open redirect weaknesses.
• Evaluate chains to OAuth, phishing, and SSRF, enabling realistic red-team scenarios within authorized engagements.
• Provide a repeatable hunting workflow with validation steps and practical payload patterns to assess redirect-related risks.

Quick Start

Load the skill and begin scanning targets for redirect parameters, then verify open redirects using your preferred testing stack.