daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/vulnerabilities/generic/open-redirect.yaml

124 lines
5.0 KiB
YAML
Raw Normal View History

payload updates
2021-02-14 11:41:51 +00:00
id: open-redirect
info:
name: Open URL redirect detection
Updated author names
2021-06-09 12:20:56 +00:00
author: afaq,melbadry9,Elmahdi,pxmme1337,Regala_,andirrahmani1,geeknik
payload updates
2021-02-14 11:41:51 +00:00
severity: low
Updates across many templates for clarity, spelling, and grammar.
2021-09-05 21:13:45 +00:00
description: A user-controlled input redirects users to an external website.
Update open-redirect.yaml
2021-08-11 07:38:24 +00:00
tags: redirect,generic
payload updates
2021-02-14 11:41:51 +00:00
requests:
Update open-redirect.yaml (#3404) * Update open-redirect.yaml add new payloads * minor update Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-26 15:23:11 +00:00
- raw:
- |
GET /{{redirect}} HTTP/1.1
Host: {{Hostname}}
payload updates
2021-02-14 11:41:51 +00:00
Update open-redirect.yaml (#3404) * Update open-redirect.yaml add new payloads * minor update Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-26 15:23:11 +00:00
payloads:
redirect:
Fixed possible FPs in open redirect templates (#4544) * Fixed possible FPs in open redirect templates We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results. * updated example domain Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-06 10:40:15 +00:00
- '%0a/interact.sh/'
- '%0d/interact.sh/'
- '%00/interact.sh/'
- '%09/interact.sh/'
- '%5C%5Cinteract.sh/%252e%252e%252f'
- '%5Cinteract.sh'
- '%5cinteract.sh/%2f%2e%2e'
- '%5c{{RootURL}}interact.sh/%2f%2e%2e'
- '../interact.sh'
- '.interact.sh'
- '/%5cinteract.sh'
- '////\;@interact.sh'
- '////interact.sh'
- '///interact.sh'
- '///interact.sh/%2f%2e%2e'
- '///interact.sh@//'
- '///{{RootURL}}interact.sh/%2f%2e%2e'
- '//;@interact.sh'
- '//\/interact.sh/'
- '//\@interact.sh'
- '//\interact.sh'
- '//\tinteract.sh/'
- '//interact.sh/%2F..'
- '//interact.sh//'
Added URL encoded payload (#4664)
2022-06-25 07:08:56 +00:00
- '//%69%6e%74%65%72%61%63%74%2e%73%68'
Fixed possible FPs in open redirect templates (#4544) * Fixed possible FPs in open redirect templates We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results. * updated example domain Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-06 10:40:15 +00:00
- '//interact.sh@//'
- '//interact.sh\tinteract.sh/'
- '//https://interact.sh@//'
- '/<>//interact.sh'
- '/\/\/interact.sh/'
- '/\/interact.sh'
- '/\interact.sh'
- '/interact.sh'
- '/interact.sh/%2F..'
- '/interact.sh/'
- '/interact.sh/..;/css'
- '/https:interact.sh'
- '/{{RootURL}}interact.sh/'
- '/〱interact.sh'
- '/〵interact.sh'
- '/ゝinteract.sh'
- '/ーinteract.sh'
- '/ｰinteract.sh'
- '<>//interact.sh'
- '@interact.sh'
- '@https://interact.sh'
- '\/\/interact.sh/'
- 'interact%E3%80%82sh'
- 'interact.sh'
- 'interact.sh/'
- 'interact.sh//'
- 'interact.sh;@'
- 'https%3a%2f%2finteract.sh%2f'
- 'https:%0a%0dinteract.sh'
- 'https://%0a%0dinteract.sh'
- 'https://%09/interact.sh'
- 'https://%2f%2f.interact.sh/'
- 'https://%3F.interact.sh/'
- 'https://%5c%5c.interact.sh/'
- 'https://%5cinteract.sh@'
- 'https://%23.interact.sh/'
- 'https://.interact.sh'
- 'https://////interact.sh'
- 'https:///interact.sh'
- 'https:///interact.sh/%2e%2e'
- 'https:///interact.sh/%2f%2e%2e'
- 'https:///interact.sh@interact.sh/%2e%2e'
- 'https:///interact.sh@interact.sh/%2f%2e%2e'
- 'https://:80#@interact.sh/'
- 'https://:80?@interact.sh/'
- 'https://:@\@interact.sh'
- 'https://:@interact.sh\@interact.sh'
- 'https://:@interact.sh\@WillBeReplaced.com'
- 'https://;@interact.sh'
- 'https://\tinteract.sh/'
- 'https://interact.sh/interact.sh'
- 'https://interact.sh/https://interact.sh/'
- 'https://www.\.interact.sh'
- 'https:/\/\interact.sh'
- 'https:/\interact.sh'
- 'https:/interact.sh'
- 'https:interact.sh'
- '{{RootURL}}interact.sh'
- '〱interact.sh'
- '〵interact.sh'
- 'ゝinteract.sh'
- 'ーinteract.sh'
- 'ｰinteract.sh'
- '?page=interact.sh&_url=interact.sh&callback=interact.sh&checkout_url=interact.sh&content=interact.sh&continue=interact.sh&continueTo=interact.sh&counturl=interact.sh&data=interact.sh&dest=interact.sh&dest_url=interact.sh&dir=interact.sh&document=interact.sh&domain=interact.sh&done=interact.sh&download=interact.sh&feed=interact.sh&file=interact.sh&host=interact.sh&html=interact.sh&http=interact.sh&https=interact.sh&image=interact.sh&image_src=interact.sh&image_url=interact.sh&imageurl=interact.sh&include=interact.sh&langTo=interact.sh&media=interact.sh&navigation=interact.sh&next=interact.sh&open=interact.sh&out=interact.sh&page=interact.sh&page_url=interact.sh&pageurl=interact.sh&path=interact.sh&picture=interact.sh&port=interact.sh&proxy=interact.sh&redir=interact.sh&redirect=interact.sh&redirectUri=interact.sh&redirectUrl=interact.sh&reference=interact.sh&referrer=interact.sh&req=interact.sh&request=interact.sh&retUrl=interact.sh&return=interact.sh&returnTo=interact.sh&return_path=interact.sh&return_to=interact.sh&rurl=interact.sh&show=interact.sh&site=interact.sh&source=interact.sh&src=interact.sh&target=interact.sh&to=interact.sh&uri=interact.sh&url=interact.sh&val=interact.sh&validate=interact.sh&view=interact.sh&window=interact.sh&redirect_to=interact.sh&ret=interact.sh&r2=interact.sh&img=interact.sh&u=interact.sh&r=interact.sh&URL=interact.sh&AuthState=interact.sh'
Additional check add
2021-06-29 11:56:42 +00:00
Added stop-at-first-match in applicable templates
2021-09-02 11:59:10 +00:00
stop-at-first-match: true
Additional check add
2021-06-29 11:56:42 +00:00
matchers-condition: and
payload updates
2021-02-14 11:41:51 +00:00
matchers:
Update open-redirect.yaml (#3404) * Update open-redirect.yaml add new payloads * minor update Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-26 15:23:11 +00:00
payload updates
2021-02-14 11:41:51 +00:00
- type: regex
part: header
Add Another Redirect Payload and Extend the Regex to Recognize it (#3299) * Fix Open Redirect Header Regex The regex was missing the correct escaping for special char `/` * Add New General Open Redirect There's another option for open redirects. I tested it in FF and Chrome. * Update Location Redirect Regex * update: mix changes Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-13 15:08:21 +00:00
regex:
Fixed possible FPs in open redirect templates (#4544) * Fixed possible FPs in open redirect templates We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results. * updated example domain Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-06 10:40:15 +00:00
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1
Additional check add
2021-06-29 11:56:42 +00:00
- type: status
status:
- 301
Add Another Redirect Payload and Extend the Regex to Recognize it (#3299) * Fix Open Redirect Header Regex The regex was missing the correct escaping for special char `/` * Add New General Open Redirect There's another option for open redirects. I tested it in FF and Chrome. * Update Location Redirect Regex * update: mix changes Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-13 15:08:21 +00:00
- 302
- 307
Update open-redirect.yaml (#3404) * Update open-redirect.yaml add new payloads * minor update Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-26 15:23:11 +00:00
- 308
Added URL encoded payload (#4664)
2022-06-25 07:08:56 +00:00
condition: or