open-redirect

To detect open redirect vulnerabilities, analyze URL parameters and sinks to identify unvalidated redirects. This Skill identifies parameters that allow open redirects and demonstrates exploitation techniques involving phishing, OAuth token theft, and SSRF.

An open redirect vulnerability occurs when a web application accepts untrusted input to redirect users. Exploitation involves manipulating URL parameters to redirect victims to malicious sites for phishing, OAuth token theft, or SSRF attack chains.

Bypassing URL validation filters for open redirects involves exploring various URL manipulation techniques to circumvent input sanitization. This Skill demonstrates methods to bypass these filters and identify sinks that accept malicious redirect parameters.

Open redirect vulnerabilities can be chained with SSRF and phishing attacks. This Skill demonstrates exploitation chains where open redirects facilitate OAuth token theft, Server-Side Request Forgery, and credential harvesting through malicious redirection.

Identifying open redirect sinks and parameters requires knowledge of URL manipulation and common attack patterns. This Skill analyzes URL parameters to find sinks that allow open redirects, targeting web applications with vulnerable redirect logic.

Open redirect detection requires analyzing URL parameters and sinks because vulnerable applications pass unvalidated input directly to redirect functions. This Skill identifies these parameters and sinks to demonstrate exploitation vectors like phishing and SSRF.