Questions tagged [url-redirection]

URL redirection is a technique for making web resources available under more than one URL address, or moved to a different location while maintaining compatibility with previously published URLs.

Filter by
Sorted by
Tagged with
3 votes
1 answer
622 views

In general, is URL shortening safe when used with proxy server?

So, our proxy server blocks all traffic except approved ones. Would allowing a URL shortening (aka.ms, for example) mean any URL will bypass the proxy? Or is it just a redirect and the proxy/security ...
Data-Base's user avatar
  • 131
0 votes
0 answers
49 views

Is it possible to track cross origin redirection?

I can successfully iframe a page on origin B from origin A (no x-frame-deny, content security policy, etc). A page on origin B (page X) redirects to a page on origin C (page Y) with a server side ...
Hackermon's user avatar
0 votes
0 answers
196 views

Documentation on mobile-webview.gmail.com link masking?

Several google products (mainly Gmail) masks links using a fake-dns mobile-webview.gmail.com That domain doesn't resolve anywhere, not even Google's own NS https://dnschecker.org/#A/mobile-webview....
gcb's user avatar
  • 223
0 votes
1 answer
121 views

Is a random unknown HTTP request header 'Host' that is reflected in the HTTP response 'Location" header (3xx) a open redirect or DNS rebinding?

If I send an unknown domain name in the HTTP request header 'Host' to a webserver and the webserver responds with a HTTP status code 301/302 (redirect) along with a HTTP response header 'Location' ...
Bob Ortiz's user avatar
  • 6,655
0 votes
1 answer
96 views

Detect invalid cert Android client if URL being redirected to a fake server [duplicate]

Here is the scenario: Server A is an authentic server (A.com). Server F is a fake server (F.com) that also has a valid cert for F.com has a copy of A.com certificate to it (to fake as A.com). Client ...
Tung D. Nguyen's user avatar
0 votes
0 answers
98 views

Redirect security with opaque state token to SPA on login

I am currently working on a sign-up flow on Auth0 where I need to get GDPR consent after a person does a social login. We can run serverless functions using their Actions that check if GDPR has been ...
physicsmajor1's user avatar
0 votes
1 answer
241 views

Why doesn't client_secret prevent authorization code OAuth2 redirect attacks?

OAuth2 requires clients to register allowed values for redirect_uri. Otherwise, an attacker could receive the authorization code. For example: https://authorization.example/oauth/authorize ?client_id=...
Paul Draper's user avatar
  • 1,010
1 vote
1 answer
286 views

Is redirecting back to login page bad practice/insecure

One of our company sites redirects all bad URLs back to the login page which is required to even access the site. Is this insecure? It feels like it may cause some weird issues as I have never seen ...
Kineye's user avatar
  • 13
50 votes
4 answers
6k views

Is URL rewriting in e-mail a sound security practice?

Our work e-mail server has started rewriting links in incoming mail through a redirecting gateway, for "security reasons": if I receive an e-mail containing a link to https://security....
Federico Poloni's user avatar
1 vote
1 answer
242 views

Do sites like reddit and Quora expose their Google API client keys to the public?

On Quora, when I want to sign in using Google, I am redirected to this URL, which has a parameter client_id=917071888555.apps.googleusercontent.com. Similarly, reddit takes me here, which has ...
Cornelius Brand's user avatar
3 votes
1 answer
823 views

What are the risks of using wildcard in context path of OIDC/OAuth redirect_uri?

I'm using Keycloak for my authentication needs. It allows me to use * as wildcard when whitelisting redirect_uris for OIDC clients. What are the risks of using * in context path of redirect_uri? For ...
Fean Arnailes's user avatar
0 votes
2 answers
808 views

Does the HTTP status code 302 guarantee no other content was served as part of the same HTTP response?

Does receiving the HTTP 302 status code from a domain A guarantee in any shape or form that there was no JavaScript ran or any additional content (external or not) loaded from that domain A? The ...
Marty Cagas's user avatar
102 votes
5 answers
14k views

Can I safely preview a short link?

There are a lot of different URL shorteners out there, like Bitly or TinyURL. Besides their main purpose of shortening a link, they also: obfuscate the actual URL collect statistics about the usage ...
stackprotector's user avatar
0 votes
1 answer
136 views

Analyzing potential threats from re-directs

I just clicked a link on pinterest to take me to the source website. Upon clicking, it took me to the following 5 links: https://s3.amazonaws.com/bishkek0303/decorative-graphic-design-element-in-...
SheerKahn's user avatar
  • 155
0 votes
2 answers
323 views

Open Redirects - Can they be done without modifying server side code?

Open redirects showed up in the news this week thanks to Microsoft. While this is very old issue, this is a new topic for me. The concern seems to be that a user hovering over a link may not read ...
Trebor's user avatar
  • 103
0 votes
0 answers
925 views

Stored XSS cookie stealing, but a loop of redirection

I found a stored xss vulnerability on a comment section of a fun site and I wanted to steal cookies using xss attack. So on my remote server I run an HTTP server with Flask using python where there is ...
Lu Ciph3r's user avatar
3 votes
1 answer
855 views

Hijacking URL that ends with a trailing slash

I am pentesting an API which makes a backend call to https://example.org/ and appends any input you provide it (for example, if you provide test it will call https://example.org/test). I am trying to ...
Bob's user avatar
  • 89
0 votes
1 answer
167 views

Is there any way that I can redirect to other site when someone access to a particular site? [closed]

On my company's computer, someone play the internet game so I want to deny the site and redirect to another site. Or If someone access the game site redirect to other site right off on computer ...
yeongmin hong's user avatar
0 votes
1 answer
572 views

Open redirect adding symbol

I know there are some questions around open redirects but with this one I have some additional questions. In order to not release the assets I am going to replace the asset with "exampleeee.com&...
HereToLearn's user avatar
1 vote
1 answer
517 views

Unusual Google Chrome Download Redirection

When I go to https://www.google.com/chrome/, I get redirected to sign in and then forwarded to some app engine link as can be seen in the continue parameter of the following URL: https[:]//accounts[.]...
javaWebDev's user avatar
0 votes
1 answer
280 views

Does an url that redirecting infinitely have any impact to website?

I am testing a bug bounty website, and found an endpoint like www.example.com/infinite. When open it, it keep doing 302 redirect to itself until browser stops it for redirecting too many times. For ...
trieulieuf9's user avatar
0 votes
1 answer
572 views

Can this Javascript redirect be exploited in some way?

Since I can modify pathname, search and hash value could I leverages this in some way? var URL = window.location.hostname+window.location.pathname + window.location.search + window.location.hash; ...
Maicake's user avatar
  • 567
0 votes
1 answer
133 views

URL shortener who does nothing according to the owner [closed]

I talk in a security forum, and sometimes a moderator share links to sources about things he talk about, but when I hover on these links, the link is different the the source it self. It is actually a ...
div Mi's user avatar
  • 1
1 vote
1 answer
236 views

What are the risks associate with accessing Same web application with two different URLs?

We have done vulnerability analysis with third party security team. They have mentioned one point as critical findings but i don't understand risk associated with it and suggested remedial action also ...
Infra's user avatar
  • 655
1 vote
1 answer
372 views

How to exploit open redirect vulnerability which must contain the original url

Let's say I have the following url: https://secure.sub.domain.com/?continue=https://sub.domain.com I found out that I can put anything I want before sub.domain.com in the continue parameter as long as ...
Nobu's user avatar
  • 11
0 votes
1 answer
401 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
Fit Tony's user avatar
0 votes
1 answer
2k views

How do I redirect HTTPS site to another HTTPS site over LAN using a linux? [closed]

Is there a tool, or a command for linux that can make possible to redirect HTTPS site to another HTTPS site on LAN? i'm using Kali Linux, and all the tools and commands that i found was to redirect ...
ARKban's user avatar
  • 1
3 votes
0 answers
599 views

Preventing open redirects / xss on a variable return url / iframe

Let's assume I have a website where I have to either redirect the user to another URL or include another URL in an iframe, that is given by a GET parameter. I cannot use HMAC when the URL is created. ...
xsrf's user avatar
  • 178
1 vote
2 answers
245 views

How some sites prevent cross-site requests through referrer although there are redirections allowed

I read about referrer header that some sites use to allow only requests made by the pages of the site. So if I make a page hacker.com, and let this page make a request to https://twitter.com/i/flow/...
zyydoosh's user avatar
  • 123
1 vote
1 answer
307 views

How short can a shortened base 62 url path be and be reasonably protected from a brute force attack?

If one is creating pseudo-random base 62 url paths, and one didn't want those paths to be reasonably vulnerable to brute force attack. How short could they be? Reasoning Now one could have expiring ...
Mark Rogers's user avatar
1 vote
0 answers
264 views

Router infected; Factory reset not working [closed]

Recently, I was being redirected (occasionally, not every time) by "ilkmawgod.site" (no information on google) to malicious webpages. I scanned my every thing using quick heal, but it didn't find ...
TheCodeDemon's user avatar
1 vote
1 answer
211 views

Security risks in 301/2 redirect HTTPS to HTTP

I have noticed that my employer's website, which handles sensitive information, redirects some pages from HTTPS to HTTP on another domain. This feels like a poor practice. Are there any security ...
zoolander's user avatar
-2 votes
2 answers
196 views

Dns poisoning for any search [closed]

DNS poisoning works only if we open a certain website. For example, a victim enters 192.168.21.56 in a browser, it will be directed to a phishing page. What if we want to redirect the victim to 192....
Noone Noone's user avatar
0 votes
1 answer
1k views

How to find PHP filename and ID of the URL?

.htaccess is now a very common URL rewrite to make it SEO friendly and cover the database IDs. What are the ways to explore php file on the server given to URL via .htaccess? Example : The URL is ...
Jack's user avatar
  • 1
1 vote
1 answer
352 views

How can i cause a redirect in browser?

I'm able to edit a parameter which is then reflected inside a link. I'd like to know how and if it's possible to cause a redirect. In shorts when i edit the parameter example like this example=/test....
apex's user avatar
  • 11
1 vote
1 answer
128 views

What is the ideal technique to protect unauthorized redirects

I'm looking for the best way to secure unauthorized redirects from GET parameter where url=http://example.com I'm thinking about creating an unique identifier like using a hashing function (md5 for ...
hofD's user avatar
  • 13
1 vote
0 answers
134 views

Is it possible to get hacked by a redirection placed inside a Facebook Graph URL?

Basically, I have a webapp which needs to check the validity of the user of an Android app. After completing the basic login flow with Facebook in the Android app, a Facebook access token is sent to ...
Csa77's user avatar
  • 111
-5 votes
2 answers
360 views

How can HSTS preloading be avoided?

Preloading is a primitive operation. You must preload for a year or more, and "be aware that inclusion in the preload list cannot easily be undone," according to the registration tool. Therefore, if ...
David Spector's user avatar
2 votes
0 answers
353 views

Passing 3rd Party Access Token in redirection URL of 3rd Party Website

I am integrating a website with 3rd party API. The 3rd party site allows me to generate Access Token by using Client Key/Client Secret. In one of the pages, I need to redirect to 3rd party site 's ...
Ashish Shukla's user avatar
1 vote
0 answers
711 views

Purpose of this link that redirects to random websites [closed]

Here is a link from an SMS I received abev1o.yzv.jp. This link redirects to a somewhat random website (twitter, youtube, CNN, and others). I downloaded the page using curl: https://gist.github.com/...
serega's user avatar
  • 111
1 vote
1 answer
230 views

Security Considerations To Account for When Redirecting From Microservice to Another

I am evaluating the above service design where I want to have mechanism to pass a user through multiple microservices. In this simple example, the user goes through a sign-up process and once done, ...
Mojo's user avatar
  • 121
1 vote
1 answer
572 views

False Positive of Cleartext Submission in (CWE-319) in Burp?

In a recent execution of a spider, Burp reported cleartext submission of a password CWE-319, but the evidence in the report is merely the preceding GET request of a non-existant page, redirected via ...
varontron's user avatar
  • 113
1 vote
2 answers
748 views

How to report error if redirect_uri doesn't match?

How should the auth server (IDP) report the error if the authorisation request redirect_uri doesn't match the configured redirect_uri for the given client? Let's consider concrete example: auth.com ...
user avatar
0 votes
1 answer
507 views

Referer value reflected in location response? [duplicate]

I found a login form on a website that redirects you regardless if the insert credentials are correct or wrong (302 redirect). I noticed that the value of the header Referer: is sent to header ...
Dees Peeleey's user avatar
3 votes
1 answer
208 views

Can a user be redirected to a malicious website if only a part of the url can be controlled by user input?

I have a site located at https://gooddomain.com/wonderful?returnPath=goodThings which redirects me to https://gooddomain.com/somegoodplace/goodThings At the server side, the redirect is defined ...
hax's user avatar
  • 3,951
6 votes
1 answer
1k views

How Concerning Is This X-CU-modified: FAKECU Text Attack?

A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn't redirect to the fake site, and instead their mail client sent them ...
Louis Waweru's user avatar
0 votes
2 answers
425 views

What was the point of Implicit Grant Flow in OAuth 2.0?

I've read a lot about Implicit Grant Flow and when it should be used, but I can't wrap my head around a use case for where it would have made sense over the Authentication Code Grant Flow before PKCEs ...
johnnyodonnell's user avatar
1 vote
2 answers
250 views

How does "automatic" redirection occurs from a legitimate website to a scammy one?

Using Firefox on Windows 10 every time when I visit ebay.com I get redirected to a clearly fraudulent website telling me I've won some prize and asking me to enter my personal information. The ...
mickkk's user avatar
  • 119
1 vote
1 answer
327 views

PCI DSS SAQ A compliance with WooCommerce and 3rd party payment gateways - possible? [closed]

I am considering using Wordpress, WooCommerce, third party payment processor and different plugins for an ecommerce store. I have trouble figuring out if it is possible to do all that and to be PCI ...
elievi's user avatar
  • 11
0 votes
2 answers
1k views

How does someone know i clicked a link in an email? URL spoofing? JSON?

How do hackers/scammers know that I clicked a link? Why is my personal info in the url redirect link? Is this info then being stored in a database and the hacker/scammer knows that because this ...
BetweenBeltSizes95's user avatar

1
2 3 4 5