Questions tagged [url-redirection]
URL redirection is a technique for making web resources available under more than one URL address, or moved to a different location while maintaining compatibility with previously published URLs.
226
questions
0
votes
0
answers
12
views
Documentation on mobile-webview.gmail.com link masking?
Several google products (mainly Gmail) masks links using a fake-dns mobile-webview.gmail.com
That domain doesn't resolve anywhere, not even Google's own NS https://dnschecker.org/#A/mobile-webview....
- 213
0
votes
1
answer
35
views
Is a random unknown HTTP request header 'Host' that is reflected in the HTTP response 'Location" header (3xx) a open redirect or DNS rebinding?
If I send an unknown domain name in the HTTP request header 'Host' to a webserver and the webserver responds with a HTTP status code 301/302 (redirect) along with a HTTP response header 'Location' ...
- 6,661
0
votes
1
answer
61
views
Detect invalid cert Android client if URL being redirected to a fake server [duplicate]
Here is the scenario:
Server A is an authentic server (A.com).
Server F is a fake server (F.com) that also has a valid cert for
F.com has a copy of A.com certificate to it (to fake as A.com).
Client ...
- 109
0
votes
0
answers
63
views
Redirect security with opaque state token to SPA on login
I am currently working on a sign-up flow on Auth0 where I need to get GDPR consent after a person does a social login. We can run serverless functions using their Actions that check if GDPR has been ...
0
votes
1
answer
162
views
Why doesn't client_secret prevent authorization code OAuth2 redirect attacks?
OAuth2 requires clients to register allowed values for redirect_uri.
Otherwise, an attacker could receive the authorization code. For example:
https://authorization.example/oauth/authorize
?client_id=...
- 1,010
1
vote
1
answer
216
views
Is redirecting back to login page bad practice/insecure
One of our company sites redirects all bad URLs back to the login page which is required to even access the site. Is this insecure? It feels like it may cause some weird issues as I have never seen ...
- 13
50
votes
4
answers
5k
views
Is URL rewriting in e-mail a sound security practice?
Our work e-mail server has started rewriting links in incoming mail through a redirecting gateway, for "security reasons": if I receive an e-mail containing a link to
https://security....
- 871
1
vote
1
answer
208
views
Do sites like reddit and Quora expose their Google API client keys to the public?
On Quora, when I want to sign in using Google, I am redirected to this URL, which has a parameter client_id=917071888555.apps.googleusercontent.com.
Similarly, reddit takes me here, which has ...
- 113
3
votes
0
answers
713
views
What are the risks of using wildcard in context path of OIDC/OAuth redirect_uri?
I'm using Keycloak for my authentication needs. It allows me to use * as wildcard when whitelisting redirect_uris for OIDC clients. What are the risks of using * in context path of redirect_uri? For ...
0
votes
2
answers
676
views
Does the HTTP status code 302 guarantee no other content was served as part of the same HTTP response?
Does receiving the HTTP 302 status code from a domain A guarantee in any shape or form that there was no JavaScript ran or any additional content (external or not) loaded from that domain A?
The ...
- 224
102
votes
5
answers
14k
views
Can I safely preview a short link?
There are a lot of different URL shorteners out there, like Bitly or TinyURL. Besides their main purpose of shortening a link, they also:
obfuscate the actual URL
collect statistics about the usage ...
- 1,653
0
votes
1
answer
115
views
Analyzing potential threats from re-directs
I just clicked a link on pinterest to take me to the source website. Upon clicking, it took me to the following 5 links:
https://s3.amazonaws.com/bishkek0303/decorative-graphic-design-element-in-...
- 155
0
votes
2
answers
237
views
Open Redirects - Can they be done without modifying server side code?
Open redirects showed up in the news this week thanks to Microsoft. While this is very old issue, this is a new topic for me. The concern seems to be that a user hovering over a link may not read ...
- 103
0
votes
0
answers
805
views
Stored XSS cookie stealing, but a loop of redirection
I found a stored xss vulnerability on a comment section of a fun site and I wanted to steal cookies using xss attack.
So on my remote server I run an HTTP server with Flask using python where there is ...
3
votes
1
answer
738
views
Hijacking URL that ends with a trailing slash
I am pentesting an API which makes a backend call to https://example.org/ and appends any input you provide it (for example, if you provide test it will call https://example.org/test). I am trying to ...
- 79
0
votes
1
answer
109
views
Is there any way that I can redirect to other site when someone access to a particular site? [closed]
On my company's computer, someone play the internet game so I want to deny the site and redirect to another site.
Or If someone access the game site redirect to other site right off on computer ...
0
votes
1
answer
515
views
Open redirect adding symbol
I know there are some questions around open redirects but with this one I have some additional questions. In order to not release the assets I am going to replace the asset with "exampleeee.com&...
1
vote
1
answer
464
views
Unusual Google Chrome Download Redirection
When I go to https://www.google.com/chrome/, I get redirected to sign in and then forwarded to some app engine link as can be seen in the continue parameter of the following URL:
https[:]//accounts[.]...
- 11
0
votes
1
answer
241
views
Does an url that redirecting infinitely have any impact to website?
I am testing a bug bounty website, and found an endpoint like www.example.com/infinite. When open it, it keep doing 302 redirect to itself until browser stops it for redirecting too many times.
For ...
- 51
0
votes
1
answer
498
views
Can this Javascript redirect be exploited in some way?
Since I can modify pathname, search and hash value could I leverages this in some way?
var URL = window.location.hostname+window.location.pathname + window.location.search + window.location.hash;
...
- 567
0
votes
1
answer
119
views
URL shortener who does nothing according to the owner [closed]
I talk in a security forum, and sometimes a moderator share links to sources about things he talk about, but when I hover on these links, the link is different the the source it self. It is actually a ...
- 1
1
vote
1
answer
205
views
What are the risks associate with accessing Same web application with two different URLs?
We have done vulnerability analysis with third party security team. They have mentioned one point as critical findings but i don't understand risk associated with it and suggested remedial action also ...
- 655
1
vote
1
answer
320
views
How to exploit open redirect vulnerability which must contain the original url
Let's say I have the following url: https://secure.sub.domain.com/?continue=https://sub.domain.com
I found out that I can put anything I want before sub.domain.com in the continue parameter as long as ...
- 11
0
votes
1
answer
362
views
Redirection - Different Website from Different Computer
There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
- 11
0
votes
1
answer
2k
views
How do I redirect HTTPS site to another HTTPS site over LAN using a linux? [closed]
Is there a tool, or a command for linux that can make possible to redirect HTTPS site to another HTTPS site on LAN? i'm using Kali Linux, and all the tools and commands that i found was to redirect ...
- 1
3
votes
0
answers
524
views
Preventing open redirects / xss on a variable return url / iframe
Let's assume I have a website where I have to either redirect the user to another URL or include another URL in an iframe, that is given by a GET parameter.
I cannot use HMAC when the URL is created. ...
- 158
1
vote
2
answers
198
views
How some sites prevent cross-site requests through referrer although there are redirections allowed
I read about referrer header that some sites use to allow only requests made by the pages of the site. So if I make a page hacker.com, and let this page make a request to https://twitter.com/i/flow/...
- 123
1
vote
1
answer
276
views
How short can a shortened base 62 url path be and be reasonably protected from a brute force attack?
If one is creating pseudo-random base 62 url paths, and one didn't want those paths to be reasonably vulnerable to brute force attack. How short could they be?
Reasoning
Now one could have expiring ...
- 508
1
vote
0
answers
241
views
Router infected; Factory reset not working [closed]
Recently, I was being redirected (occasionally, not every time) by "ilkmawgod.site" (no information on google) to malicious webpages. I scanned my every thing using quick heal, but it didn't find ...
- 11
1
vote
1
answer
186
views
Security risks in 301/2 redirect HTTPS to HTTP
I have noticed that my employer's website, which handles sensitive information, redirects some pages from HTTPS to HTTP on another domain. This feels like a poor practice. Are there any security ...
- 13
-2
votes
2
answers
176
views
Dns poisoning for any search [closed]
DNS poisoning works only if we open a certain website.
For example, a victim enters 192.168.21.56 in a browser, it will be directed to a phishing page.
What if we want to redirect the victim to 192....
- 51
0
votes
1
answer
1k
views
How to find PHP filename and ID of the URL?
.htaccess is now a very common URL rewrite to make it SEO friendly and cover the database IDs.
What are the ways to explore php file on the server given to URL via .htaccess?
Example :
The URL is ...
- 1
1
vote
1
answer
302
views
How can i cause a redirect in browser?
I'm able to edit a parameter which is then reflected inside a link. I'd like to know how and if it's possible to cause a redirect. In shorts when i edit the parameter example like this example=/test....
- 11
1
vote
1
answer
108
views
What is the ideal technique to protect unauthorized redirects
I'm looking for the best way to secure unauthorized redirects from GET parameter where
url=http://example.com
I'm thinking about creating an unique identifier like using a hashing function (md5 for ...
- 13
1
vote
0
answers
120
views
Is it possible to get hacked by a redirection placed inside a Facebook Graph URL?
Basically, I have a webapp which needs to check the validity of the user of an Android app. After completing the basic login flow with Facebook in the Android app, a Facebook access token is sent to ...
- 111
-5
votes
2
answers
310
views
How can HSTS preloading be avoided?
Preloading is a primitive operation. You must preload for a year or more, and "be aware that inclusion in the preload list cannot easily be undone," according to the registration tool. Therefore, if ...
2
votes
0
answers
322
views
Passing 3rd Party Access Token in redirection URL of 3rd Party Website
I am integrating a website with 3rd party API. The 3rd party site allows me to generate Access Token by using Client Key/Client Secret.
In one of the pages, I need to redirect to 3rd party site 's ...
- 121
1
vote
0
answers
693
views
Purpose of this link that redirects to random websites [closed]
Here is a link from an SMS I received abev1o.yzv.jp.
This link redirects to a somewhat random website (twitter, youtube, CNN, and others).
I downloaded the page using curl:
https://gist.github.com/...
- 111
1
vote
1
answer
209
views
Security Considerations To Account for When Redirecting From Microservice to Another
I am evaluating the above service design where I want to have mechanism to pass a user through multiple microservices. In this simple example, the user goes through a sign-up process and once done, ...
- 121
1
vote
1
answer
504
views
False Positive of Cleartext Submission in (CWE-319) in Burp?
In a recent execution of a spider, Burp reported cleartext submission of a password CWE-319, but the evidence in the report is merely the preceding GET request of a non-existant page, redirected via ...
- 113
1
vote
2
answers
639
views
How to report error if redirect_uri doesn't match?
How should the auth server (IDP) report the error if the authorisation request redirect_uri doesn't match the configured redirect_uri for the given client?
Let's consider concrete example:
auth.com ...
user17497
0
votes
1
answer
454
views
Referer value reflected in location response? [duplicate]
I found a login form on a website that redirects you regardless if the insert credentials are correct or wrong (302 redirect). I noticed that the value of the header Referer: is sent to header ...
3
votes
1
answer
183
views
Can a user be redirected to a malicious website if only a part of the url can be controlled by user input?
I have a site located at
https://gooddomain.com/wonderful?returnPath=goodThings
which redirects me to
https://gooddomain.com/somegoodplace/goodThings
At the server side, the redirect is defined ...
- 3,901
6
votes
1
answer
1k
views
How Concerning Is This X-CU-modified: FAKECU Text Attack?
A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn't redirect to the fake site, and instead their mail client sent them ...
- 163
0
votes
2
answers
307
views
What was the point of Implicit Grant Flow in OAuth 2.0?
I've read a lot about Implicit Grant Flow and when it should be used, but I can't wrap my head around a use case for where it would have made sense over the Authentication Code Grant Flow before PKCEs ...
- 163
1
vote
2
answers
198
views
How does "automatic" redirection occurs from a legitimate website to a scammy one?
Using Firefox on Windows 10 every time when I visit ebay.com I get redirected to a clearly fraudulent website telling me I've won some prize and asking me to enter my personal information.
The ...
- 119
1
vote
1
answer
299
views
PCI DSS SAQ A compliance with WooCommerce and 3rd party payment gateways - possible? [closed]
I am considering using Wordpress, WooCommerce, third party payment processor and different plugins for an ecommerce store.
I have trouble figuring out if it is possible to do all that and to be PCI ...
- 11
0
votes
2
answers
956
views
How does someone know i clicked a link in an email? URL spoofing? JSON?
How do hackers/scammers know that I clicked a link? Why is my personal info in the url redirect link? Is this info then being stored in a database and the hacker/scammer knows that because this ...
0
votes
2
answers
130
views
Is there any security reason for re-directing to the main/mobile page after login?
Scenario: User searches for something and gets a link to a sub-page on a site, proceeds to go there, but is asked to sign-up/login - they do so, only then once they are logged in, they are redirected ...
- 2,071
1
vote
2
answers
788
views
infinity redirection as Dos Attack
I was wondering that infinite redirection could be used as a dos attack
in my case, I have this
test.php
<?php
$url = $_GET['url'];
header('Location: '.$newURL);
?>
...
