Tag Info

New answers tagged


i have the same problem.... i am not good at web development... but i think this might help.. http://googlewebmastercentral.blogspot.com/2009/01/open-redirect-urls-is-your-site-being.html if it works for you please let us know.... i dont even understand how to do any of the things mentioned on the post


Someone could pass a link to //xss.com/malware.php, by encoding it as https://www.example.com/login.php?previous_page=%2F%2Fxss.com%2Fmalware.php. To prevent this, you could pass the path from the site root as the parameter, so you would pass only dashboard.php. Then assemble the full link on the server side.


There's no need to reconstruct the URL. SQLMAP accepts the following variations: www.target1.com/vuln1.php?q=foobar www.target2.com/vuln2.asp?id=1 www.target3.com/vuln3/id/1* Source: https://github.com/sqlmapproject/sqlmap/wiki/Usage

Top 50 recent answers are included