Detect and exploit open redirect vulnerabilities with bypass and OAuth token theft techniques.
npx skills add https://github.com/Rifteo/skills --skill redirect-forge
Please help me install this Agent Skill. Skill: redirect-forge Source: https://github.com/Rifteo/skills/tree/main/redirect-forge Command: npx skills add https://github.com/Rifteo/skills --skill redirect-forge
This Skill provides a comprehensive methodology for detecting and exploiting open redirects, addressing the lack of a structured approach in security testing.
Run the redirect_forge skill to initiate a comprehensive open redirect vulnerability assessment on your target application.
High-intent search queries and answers about installing and using this skill.
Open redirect vulnerabilities are detected by finding unvalidated parameters that accept external URLs. This Skill provides a structured methodology to identify these parameters, verify redirection behavior, and exploit the vulnerabilities for unauthorized navigation.
OAuth token theft occurs by exploiting weak redirect_uri validation. This Skill includes specific strategies for manipulating OAuth flows to intercept and steal access tokens during the authorization process.
Chaining open redirects with SSRF, CSP bypass, phishing, and SAML/SSO token theft amplifies their impact. This methodology demonstrates how to combine open redirect flaws with other security bugs to execute complex attack scenarios.
Automated open redirect testing requires the Python libraries requests and colorama, plus the Nuclei tool. These dependencies are necessary to execute the recommended automated testing scripts and techniques.
Bypassing open redirect protection requires manipulating URL syntax and encoding to evade input filters. This methodology provides a step-by-step guide to bypassing common protection mechanisms used to block unauthorized external redirection.
bpnrockstarDiscover and validate open redirect vulnerabilities in web applications.
SkobynIdentify OAuth vulnerabilities in web applications via HTTP responses and JavaScript.
utsavthakurDetect open redirect vulnerabilities from URL parameter manipulation.
amano--Intercept HTTP traffic and test web applications for security vulnerabilities.
