domains / families / security / testing-for-open-redirect-vulnerabilities

testing-for-open-redirect-vulnerabilities

separate

Identifies and exploits open redirect vulnerabilities by analyzing URL

When to use

• When testing login/logout flows that redirect users to specified URLs
• During assessment of OAuth authorization endpoints with redirect_uri parameters
• When auditing applications with URL parameters (next, url, redirect, return, goto, target)
• During phishing simulation to chain open redirects with credential harvesting
• When testing SSO implementations for redirect validation weaknesses

Skill page

Source