vos9/Web_Hacking
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update Open Redirect.md

Browse Source
This commit is contained in:
Mehdi 2024-06-13 11:09:34 +03:30 committed by GitHub
parent 3af282202b
commit 9f6953d22b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
Open Redirect.md
View File

@ -224,9 +224,20 @@ xmlns="http://www.w3.org/2000/svg">
</svg>
</code>
```
## Automate discovery
```bash
# recommend method
waybackurl target.com | grep =http | qsreplace -a | while read domain; do python3 oralyzer.py -u $domain; done
# alternative method
waybackurl target.com | gf redirect | qsreplace -a | while read domain; do python3 oralyzer.py -u $domain; done
```
## Tools
* Burp Suite Intruder / Repeater / Logger++ (Use this extension in Burp Suite for detect pattern)
* https://github.com/r0075h3ll/Oralyzer
* [Oralyzer](https://github.com/r0075h3ll/Oralyzer)