id: aspnuke-openredirect

info:
  name: ASP-Nuke Open Redirect
  author: pdteam
  severity: low
  tags: aspnuke,redirect

requests:
  - method: GET
    path:
      - "{{BaseURL}}/gotoURL.asp?url=example.com&id=43569"

    matchers:
      - type: regex
        part: header
        regex:
          - '(?m)^(?:Location\s*:\s*)(?:https?://|//)?(?:[a-zA-Z0-9\-_]*\.)?example\.com(?:\s*)$'