Create open-redirect.yaml

vulnerabilities/open-redirect.yaml

@@ -0,0 +1,19 @@
+id: open-redirect
+
+info:
+  # name is the name of the template
+  name: Open Redirect Detection Template
+  # author is the name of the author for the template
+  author: Elmahdi
+  # severity is the severity for the template.
+  severity: Low
+requests:
+  - method: GET
+
+    path:
+      - "{{BaseURL}}//google.com/"
+    matchers:
+      - type: word
+        words:
+          - "Location: //google.com"
+        part: header