diff --git a/open-redirect-url-redirect.yaml b/open-redirect-url-redirect.yaml new file mode 100644 index 00000000000..45581160bb1 --- /dev/null +++ b/open-redirect-url-redirect.yaml @@ -0,0 +1,29 @@ +id: open-redirect-url-redirect + +info: + name: Open Redirect in url_redirect Parameter + author: ProjectDiscoveryAI + severity: medium + description: | + This template detects open redirect vulnerabilities in the `url_redirect` parameter, which can potentially redirect users to malicious websites. + tags: open-redirect + +http: + - raw: + - | + GET /example?url_redirect=https://evil.com HTTP/1.1 + Host: {{Hostname}} + + matchers-condition: and + matchers: + - type: regex + regex: + - "https://evil\\.com" + part: header + - type: word + words: + - "302 Found" + part: body + - type: status + status: + - 302