0xacb @0xacb.com · Jun 23 Here's a quick one-liner for finding open redirects to chain with something more impactful. This will hit all archived URL variants, replace parameter values with your payload, and confirm live redirects using HTTPX response matching.
2 likes 1 replies
?
Replies
Full command: ~$ gau --threads 5 --providers wayback,commoncrawl,otx,urlscan $target | \ gf redirect | \ qsreplace 'https://attacker[.]com' | \ sort -u | \ httpx -silent -follow-redirects -location -status-code -match-string 'attacker[.]com' -o open_redirects.txt