diff --git a/vulnerabilities/generic/open-redirect.yaml b/vulnerabilities/generic/open-redirect.yaml index b317702918..5feaa2d0ff 100644 --- a/vulnerabilities/generic/open-redirect.yaml +++ b/vulnerabilities/generic/open-redirect.yaml @@ -28,6 +28,7 @@ requests: - '{{BaseURL}}/%0d/example.com/' - '{{BaseURL}}////example.com/%2f%2e%2e' - '{{BaseURL}}/%5cexample.com/%2f%2e%2e' + - '{{BaseURL}}/%5C%5Cexample.com/%252e%252e%252f' - '{{BaseURL}}/{{BaseURL}}example.com' - '{{BaseURL}}//{{BaseURL}}example.com/' - '{{BaseURL}}////{{BaseURL}}example.com/%2f%2e%2e' @@ -39,11 +40,13 @@ requests: matchers-condition: and matchers: - type: regex - regex: - - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_\.@]*)example\.com.*$' part: header + regex: + - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$' - type: status status: - - 302 - 301 + - 302 + - 307 + - 308 \ No newline at end of file