# Open Redirection Testing

Common injection parameters

```
/{payload}
?next={payload}
?url={payload}
?target={payload}
?rurl={payload}
?dest={payload}
?destination={payload}
?redir={payload}
?redirect_uri={payload}
?redirect_url={payload}
?redirect={payload}
/redirect/{payload}
/cgi-bin/redirect.cgi?{payload}
/out/{payload}
/out?{payload}
?view={payload}
/login?to={payload}
?image_url={payload}
?go={payload}
?return={payload}
?returnTo={payload}
?return_to={payload}
?checkout_url={payload}
?continue={payload}
?return_path={payload}
```

* [ ] Use the burp 'find' option in order to find parameters such as URL, red, redirect, redir, origin, redirect\_uri, target, etc
* [ ] Check the value of these parameters which may contain a URL
* [ ] Change the URL value to [www.test.com](http://www.chintan.com/) and check if gets redirected or not
* [ ] Try Single Slash and URL encoding
* [ ] Using a whitelisted domain or keyword
* [ ] Using // to bypass HTTP blacklisted keyword
* [ ] Using https: to bypass // blacklisted keyword
* [ ] Using \ to bypass // blacklisted keyword
* [ ] Using // to bypass // blacklisted keyword
* [ ] Using null byte %00 to bypass blacklist filter
* [ ] Using ° symbol to bypass
