id: aspnuke-openredirect

info:
  name: ASP-Nuke Open Redirect
  author: pdteam
  severity: low
  tags: aspnuke,redirect

requests:
  - method: GET
    path:
      - "{{BaseURL}}/gotoURL.asp?url=google.com&id=43569"
    matchers:
      - type: regex
        part: body
        regex:
          - '(?m)^(?:Location\s*:\s*)(?:https?://|//)?(?:[a-zA-Z0-9\-_]*\.)?google\.com(?:\s*)$'