Web Security
Open Redirect
Learn how unvalidated redirect parameters let attackers redirect users to malicious sites — and how chaining with OAuth creates critical token theft.
Beginner40 min7 lessons2 hands-on
First lesson free. The full module is part of Pro.
You'll be able to
- ✓Identify open redirect parameters in URL query strings
- ✓Chain open redirects with OAuth flows to steal authorisation codes
- ✓Bypass redirect validation using URL encoding and subdomain tricks
- ✓Use open redirects as a stepping stone in phishing campaigns