skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

hunt-open-redirect

Test URL parameters against open redirect bypass payloads.

3|1|Updated Jul 2, 2026
Search Tags:#security#vulnerability#oauth#pentest#redirect#redteam
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-open-redirect-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-open-redirect
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/hunt-open-redirect
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-open-redirect-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openredirex, nuclei, gf, qsreplace.

What problem does it solve?

This skill automates the discovery and validation of open redirect vulnerabilities, which are often overlooked but can be critical when chained to OAuth token theft, SSRF, or phishing attacks.

Core Features & Use Cases

  • Automated Discovery: Scans target URLs for common redirect parameters like ?url=, ?next=, and ?redirect_uri=.
  • Bypass Testing: Executes a comprehensive suite of payload techniques including protocol-relative, encoding, and null-byte bypasses.
  • Chain Validation: Evaluates the impact of findings by testing potential chains to OAuth authorization code theft or SSRF escalation.

Quick Start

Use the hunt-open-redirect skill to scan the target domain example.com for redirect parameters and test them against the built-in bypass payload list.

Frequently Asked Questions about hunt-open-redirect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find and validate open redirect vulnerabilities in web applications?▼

You can automate open redirect discovery by testing common URL parameters like ?next= and ?redirect_uri= against a suite of bypass payloads, validating the redirect chain to confirm successful external redirection.

What is an open redirect vulnerability and how does it impact OAuth flows?▼

An open redirect vulnerability allows arbitrary external URL redirection. When chained with OAuth flows, it enables authorization code theft, SSRF escalation, and phishing attacks by hijacking the intended redirect path.

Can I test open redirect bypass techniques like protocol-relative and encoding bypasses?▼

Yes, open redirect testing supports bypass techniques including protocol-relative paths, URL encoding variations, and null-byte injections to evade strict parameter validation filters and confirm external redirection.

Do I need command-line utilities and network connectivity to perform redirect chain verification?▼

Yes, redirect chain verification requires standard command-line utilities and network connectivity to perform HTTP request analysis, using tools like openredirex and nuclei to execute payloads and analyze server responses.

What's the best way to automate open redirect discovery using nuclei and gf?▼

Automate open redirect discovery by using gf to extract URLs with redirect parameters, qsreplace to inject bypass payloads, and nuclei to validate redirect chains, streamlining vulnerability identification and HTTP request analysis.

When should I not rely solely on automated open redirect scanning?▼

Automated open redirect scanning may miss custom validation logic or complex chain interactions, requiring manual verification to accurately evaluate impact chains like OAuth token theft and SSRF escalation.

Related Skills

Explore More Software Engineering Skills→
bpnrockstarbpnrockstar

hunt-open-redirect

Discover and validate open redirect vulnerabilities in web applications.

Community
Advanced
elementalsoulselementalsouls
3.3k

hunt-open-redirect

Identify and exploit open redirect vulnerabilities and chained redirect workflows.

Community
Advanced
andrescardonas7andrescardonas7

burp-suite

Intercept and manipulate HTTP traffic to scan web applications for vulnerabilities.

Community
Advanced
SkobynSkobyn

hunt-open-redirect

Identify open redirect vulnerabilities by analyzing URL parameters and testing redirect behavior.

Community
Advanced