Tag Info

New answers tagged

-2

i have the same problem.... i am not good at web development... but i think this might help.. http://googlewebmastercentral.blogspot.com/2009/01/open-redirect-urls-is-your-site-being.html if it works for you please let us know.... i dont even understand how to do any of the things mentioned on the post


2

Someone could pass a link to //xss.com/malware.php, by encoding it as https://www.example.com/login.php?previous_page=%2F%2Fxss.com%2Fmalware.php. To prevent this, you could pass the path from the site root as the parameter, so you would pass only dashboard.php. Then assemble the full link on the server side.


0

There's no need to reconstruct the URL. SQLMAP accepts the following variations: www.target1.com/vuln1.php?q=foobar www.target2.com/vuln2.asp?id=1 www.target3.com/vuln3/id/1* Source: https://github.com/sqlmapproject/sqlmap/wiki/Usage



Top 50 recent answers are included