Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/random-robbie/open-redirect

bugbounty casperjs open-redirect openredirect python

Last synced: 5 days ago
JSON representation

Open Redirect Finder.

Host: GitHub
URL: https://github.com/random-robbie/open-redirect
Owner: random-robbie
License: mit
Created: 2017-10-26T14:18:34.000Z (about 7 years ago)
Default Branch: master
Last Pushed: 2024-06-18T22:35:53.000Z (5 months ago)
Last Synced: 2024-06-19T04:58:03.264Z (5 months ago)
Topics: bugbounty, casperjs, open-redirect, openredirect, python
Language: Python
Size: 19.5 KB
Stars: 49
Watchers: 5
Forks: 20
Open Issues: 2
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE

# open-redirect
Open Redirect Finder.

[![Capture.png](https://s1.postimg.org/88l48isty7/Capture.png)](https://postimg.org/image/5dsg2qdn6j/)

About
----

Based on the idea from @ak1t4 and his script https://github.com/ak1t4/open-redirect-scanner

This takes 2 files one for the urls to test and one for the payloads.
I've supplied some payloads to try.

It uses the casperjs headless browser to check if the site has redirected to the payload given.
If so it logs the data to found.txt

Status
------

Working for me untested for others

Requirements
--------------

You need to have nodejs installed.

If you need to install it follow the below:

```
curl -sL https://deb.nodesource.com/setup_8.x | bash -
apt-get install -y nodejs
```

Normal Requirements

```
apt-get install phantomjs xvfb -y
npm -g install casperjs
```

How to run
--------------

```
python redirect.py urls.txt payloads.txt
```

To do
--------

Fix any issues reported

append https:// or http:// to urls provided without.