open-redirect

Identify and test open redirect vulnerabilities in web applications.

2.9k|469|Updated Mar 4, 2026
One-click install
npx skills add https://github.com/SnailSploit/Claude-Red --skill open-redirect
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: open-redirect
Source: https://github.com/SnailSploit/Claude-Red/tree/main/Skills/offensive-open-redirect
Command: npx skills add https://github.com/SnailSploit/Claude-Red --skill open-redirect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and exploit open redirect vulnerabilities, which can be used to trick users into visiting malicious sites or chaining with other attacks.

Core Features & Use Cases

  • Vulnerability Identification: Detects common patterns and parameters susceptible to open redirects.
  • Bypass Techniques: Employs various methods to circumvent security filters and achieve redirection.
  • Impact Analysis: Explains how open redirects can be leveraged for phishing, CSRF, and other advanced attacks.
  • Use Case: When testing a web application, use this Skill to systematically find and exploit any open redirect vulnerabilities in login or sharing functionalities.

Quick Start

Use the open-redirect skill to test the provided URL for open redirect vulnerabilities.

Frequently Asked Questions about open-redirect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for open redirect vulnerabilities in web applications?

To test for open redirect vulnerabilities, analyze URL parameters, referer headers, and OAuth flows to identify exploitable redirection flaws. This Skill systematically detects patterns susceptible to open redirects and provides bypass techniques for common security filters.

What is an open redirect vulnerability and how does it impact web security?

An open redirect vulnerability is a flaw that allows attackers to trick users into visiting malicious sites via unauthorized redirection. This Skill identifies these flaws and outlines impact scenarios including phishing attacks and CSRF augmentation.

How do I bypass URL redirect filters during penetration testing?

To bypass URL redirect filters during penetration testing, this Skill employs various methods to circumvent security filters and achieve redirection. It analyzes URL parameters and provides specific bypass techniques for common validation mechanisms.

Can I use open redirect flaws to chain phishing and CSRF attacks?

Yes, open redirect flaws can be leveraged for phishing and CSRF augmentation. This Skill provides impact analysis explaining how unauthorized redirections are chained with other advanced attacks to compromise web application security.

What parameters should I check to find open redirect vulnerabilities?

You should check URL parameters, referer headers, and OAuth flows to find open redirect vulnerabilities. This Skill specifically analyzes these components in login or sharing functionalities to detect exploitable redirection patterns.