Open Redirect Vulnerability Payload List

Overview:

Unvalidated redirects and forwards are possible when a web application accepts untrusted input that could cause the web application to redirect the request to a URL contained within untrusted input. By modifying untrusted URL input to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.

Because the server name in the modified link is identical to the original site, phishing attempts may have a more trustworthy appearance. Unvalidated redirect and forward attacks can also be used to maliciously craft a URL that would pass the application's access control check and then forward the attacker to privileged functions that they would normally not be able to access.

References

• https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html

Download

Cloning an Existing Repository ( Clone with HTTPS )

root@slife:~# git clone https://github.com/omurugur/Open_Redirect_Payload_List.git

Cloning an Existing Repository ( Clone with SSH )

root@slife:~# git clone [email protected]:omurugur/Open_Redirect_Payload_List.git

Contact

Mail : [email protected]

Linkedin : https://www.linkedin.com/in/omurugur-sibergüvenlik/

GitHub : https://github.com/omurugur

Twitter : https://twitter.com/omurugurrr

Medium : https://omurugur.medium.com/

Donate!

Support the authors: