offensive-open-redirect

What problem does it solve?

Open redirect vulnerabilities allow attackers to trick users into visiting malicious sites by abusing redirect endpoints. This skill provides a structured checklist to identify risky redirect parameters, bypass protections, and compose effective test chains during web app assessments.

Core Features & Use Cases

• Parameter discovery and validation: Locate and test common redirect parameters (redirect, url, next, etc.) across endpoints.
• Bypass and chaining techniques: Apply encoding, protocol tricks, and referer-based strategies to bypass simple checks and chain redirects with OAuth/SSRF.
• Use Case: In bug bounty or red-team operations, map an app's redirect flows, confirm exploitable endpoints, and outline mitigation steps.

Quick Start

Analyze an application’s redirect endpoints and run a targeted open-redirect test sequence to identify vulnerable URLs.