skills.rest
DorianGallo
DorianGalloCOMMUNITY
Explore all skills by this author →
GitHub

open-redirect

Identify and exploit open redirect vulnerabilities via URL parameters and navigation sinks.

5|2|Updated May 16, 2026
Search Tags:#url validation#phishing#ssrf#open redirect#payload crafting#oauth redirect_uri#csrf bypass
One-click install
npx skills add https://github.com/DorianGallo/hack-skills-local --skill open-redirect-doriangallo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: open-redirect
Source: https://github.com/DorianGallo/hack-skills-local/tree/main/skills/open-redirect
Command: npx skills add https://github.com/DorianGallo/hack-skills-local --skill open-redirect-doriangallo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you identify and exploit open redirect vulnerabilities where an application redirects to attacker-controlled destinations using user-influenced inputs, enabling phishing, token theft, CSRF bypasses, and SSRF chaining.

Core Features & Use Cases

  • Redirect Parameter Discovery: Locate URL parameters and navigation sinks that drive redirect behavior.
  • Filter Bypass & URL Confusion Techniques: Apply payload patterns that defeat common allowlists and parsing differences across validators, servers, and browsers.
  • Attack Chaining Playbooks: Chain open redirects into phishing amplification, OAuth token/code theft, CSRF referer bypass, and server-side redirect-following SSRF.

Quick Start

Use the open-redirect skill to review a target’s redirect parameters and test for bypasses that can land on an external domain while preserving required OAuth or CSRF conditions.

Frequently Asked Questions about open-redirect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit an open redirect vulnerability to steal OAuth tokens?▼

Open redirect vulnerabilities allow OAuth token theft by manipulating URL parameters to redirect victims to attacker-controlled destinations. Chain the redirect into authentication flows to capture authorization codes or tokens.

What is an open redirect payload and how does it bypass URL validation filters?▼

An open redirect payload bypasses URL validation by exploiting parsing differences across validators, servers, and browsers. Apply specific payload patterns that defeat common allowlists to redirect to external domains.

Can I use open redirect bugs to perform SSRF attacks?▼

Yes, open redirect bugs enable SSRF attacks by chaining server-side redirect-following features. Manipulate redirect parameters to force the server to fetch internal resources, converting client-side navigation sinks into server-side request forgeries.

How do I find redirect parameters and navigation sinks in a web application?▼

Find redirect parameters and navigation sinks by systematically discovering URL parameters that drive redirect behavior. Target client-side navigation sinks and server-side redirect features accepting attacker-influenced inputs.

Does an open redirect vulnerability help with CSRF referer bypasses?▼

An open redirect vulnerability helps with CSRF referer bypasses by crafting redirects that preserve required validation conditions. Exploit URL confusion techniques to manipulate referer headers and bypass CSRF protections during cross-site requests.

Related Skills

Explore More Education & Research Skills→
ok-helloworldok-helloworld
241

open-redirect

Identify open redirect flaws in user-controlled navigation inputs.

Community
Intermediate
lNwNllNwNl
2

open-redirect

Identify open redirect vulnerabilities by mapping user-controlled parameters to redirect sinks.

Community
Advanced
AJBcodingAJBcoding
4

moai-security-ssrf

Validate and filter URLs to protect web requests from SSRF.

Community
Advanced
SnailSploitSnailSploit
2.9k

open-redirect

Identify and test open redirect vulnerabilities in web applications.

Community
Intermediate