Update headless-open-redirect.yaml

Rearranged %0a, %0d, and %00 payloads to fix the issue when the template is not working. Added a new #/oast.live payload.

headless/headless-open-redirect.yaml

@@ -21,9 +21,6 @@ headless:
       - action: waitload
     payloads:
       redirect:
-        - '%0a/oast.live/'
-        - '%0d/oast.live/'
-        - '%00/oast.live/'
         - '%09/oast.live/'
         - '%5C%5Coast.live/%252e%252e%252f'
         - '%5Coast.live'
@@ -112,6 +109,10 @@ headless:
         - 'cgi-bin/redirect.cgi?oast.live'
         - 'out?oast.live'
         - 'login?to=http://oast.live'
+        - '#/oast.live'
+        - '%0a/oast.live/'
+        - '%0d/oast.live/'
+        - '%00/oast.live/'
     stop-at-first-match: true
     matchers:
       - type: word