👨‍🏫 Tutorial How to Find Open Redirect

[PHC - Tenma]

Find open redirect vulnerabilities with gf

Here’s a cool one-liner to help find open redirect vulnerabilities. All you need is to provide the target domain name:


heres the code:


echo "tesla.com" | waybackurls | httpx -silent -timeout 2 -threads 100 | gf redirect | anew


This is what the command does in detail:
1. Collect all URLs of the target domain from the Wayback Machine
2. Attempt to download all the URLs quickly in 100 parallel threads in order to identify working URLs
3. For all working URLs, match any potentially vulnerable parameters to open redirect
4. Print out only unique, potentially vulnerable URLs

 

[primoooooooooooooooo]

support