diff --git a/vulnerabilities/open-redirect.yaml b/vulnerabilities/open-redirect.yaml new file mode 100644 index 0000000000..2af2ad1d6c --- /dev/null +++ b/vulnerabilities/open-redirect.yaml @@ -0,0 +1,19 @@ +id: open-redirect + +info: + # name is the name of the template + name: Open Redirect Detection Template + # author is the name of the author for the template + author: Elmahdi + # severity is the severity for the template. + severity: Low +requests: + - method: GET + + path: + - "{{BaseURL}}//google.com/" + matchers: + - type: word + words: + - "Location: //google.com" + part: header